Outt
Sett
Behavioral task
behavioral1
Sample
f783663e0fbbdd86a8017976d7d09048_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f783663e0fbbdd86a8017976d7d09048_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f783663e0fbbdd86a8017976d7d09048_JaffaCakes118
Size
54KB
MD5
f783663e0fbbdd86a8017976d7d09048
SHA1
432daed1e835bafa31849cb25ea5664c7458a736
SHA256
471fe4d1156ca5a46e89872a235bde21ce58ff2e510d05a52dfafda329f38d7e
SHA512
7cc70f984d7744fe6a809c7b73dd5625676b0e11186f785f3a91b80dafd109306025e7be5d2b0642ae2f496f19405b8823c4d8d8be6410e034de7655a7cc16ec
SSDEEP
768:hM1opOjOOfwvB4ix2462j6vobH/KRyKQbHV478KHhbUFISTWRPkIR7ChAhcD7DsO:anRlievobHIyKUS73HhbUy6Wbhep
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f783663e0fbbdd86a8017976d7d09048_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ