Outt
Sett
Behavioral task
behavioral1
Sample
026fc891071f5d4e4cd8c19f89bc91b9_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
026fc891071f5d4e4cd8c19f89bc91b9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
026fc891071f5d4e4cd8c19f89bc91b9_JaffaCakes118
Size
58KB
MD5
026fc891071f5d4e4cd8c19f89bc91b9
SHA1
03b24beef97bce7abb69f67f05ea19c9b5729402
SHA256
9f1882cab297aa8b01961c3d2cda76aaab2d44f5c192ca3bea880880131d1ed9
SHA512
f05d90b94ff2f35afd0cdefa2aa7602ecfb62ab44cc32756a84b9fa5c81f06f01ec06d5aaa7edc28ce9ba19de412c2d49bc327ac1becd4c57c8a70224dfffd08
SSDEEP
1536:GQ3tfgXKHiaTwTLQ6cS9Vo1n1gQYFxHxR7gmRF59k7:VfgXKCa8TLQZh1nvYFxRRPw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
026fc891071f5d4e4cd8c19f89bc91b9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ