Outt
Sett
Behavioral task
behavioral1
Sample
00e3e68f3d5a1ac7cdf8aeea4b38a893_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00e3e68f3d5a1ac7cdf8aeea4b38a893_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
00e3e68f3d5a1ac7cdf8aeea4b38a893_JaffaCakes118
Size
58KB
MD5
00e3e68f3d5a1ac7cdf8aeea4b38a893
SHA1
0d1e21ccce8eb3cd3df22c57690567d04ddb5065
SHA256
8940fdc6cc980c201fbfff1d6552230e120cc21f86d095b6d7478df0374ecd30
SHA512
ea92fdabf1360eee18b889345c4a04a6d976f53b6d7d9dfebaa98f9e4c4f0b9da6f533fb3c640b2e8266a280addd609258de1ffabde2f2146935d5dbc94479aa
SSDEEP
1536:wXx6V+XgxxPuxEaR19/WZUFaI4RV0PlUGXWHUj2s:IgV+QPGxEQXeLV0PeGmHUjJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
00e3e68f3d5a1ac7cdf8aeea4b38a893_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ