Outt
Sett
Behavioral task
behavioral1
Sample
f818f2dee6f4a92506c299e775fcec47_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f818f2dee6f4a92506c299e775fcec47_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f818f2dee6f4a92506c299e775fcec47_JaffaCakes118
Size
72KB
MD5
f818f2dee6f4a92506c299e775fcec47
SHA1
7608a87d1907dc2e7926ce0117d6ae1c67b467b5
SHA256
612b19e00a2d7fdcf8dcb877d7553dae3a0e08e53ef5c3b8d929a9e1f89ba94d
SHA512
0a971b0e3a694399519cb74612bd5a86ae67b98dcb2a1418197f203b38e17e11e1ec6ab6678df02b299601a0700b8035a89384f03bb613f9ba3dfc289f3672bf
SSDEEP
1536:GQ3tfgXKymxFK4zx345STiiLQicEgi5PJVub/6/UujAGWP3sX8:VfgXKy4FF45S+iUicEgi5Pab/6/Us48s
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f818f2dee6f4a92506c299e775fcec47_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ