Outt
Sett
Behavioral task
behavioral1
Sample
f762e00c590e4beedfd4e3a5838a6f50_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f762e00c590e4beedfd4e3a5838a6f50_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f762e00c590e4beedfd4e3a5838a6f50_JaffaCakes118
Size
62KB
MD5
f762e00c590e4beedfd4e3a5838a6f50
SHA1
79ad28fea938eb0bd54c02d5eea6b585c294e175
SHA256
3d8143f4860513472b0ba453ff2351a8e8891e1c1b9f32db443c15f811d44f48
SHA512
ab0001fe8b82f0a99c45a3965ddce2f9e9a2a8ddff91191504db8a404a50ac2b60b301520d5536ce0d1a0465191a237166bca3242e1971da66f904ccfc62729f
SSDEEP
1536:YJEu0nVKddfTX0dOZqLjLkN64pg4b/GHQSOk4O9fVCQk:YmJnVKf7yOZqLj4NC4SwQP9i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f762e00c590e4beedfd4e3a5838a6f50_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ