Outt
Sett
Behavioral task
behavioral1
Sample
04fcff3dfed799f0692d97299398815f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04fcff3dfed799f0692d97299398815f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
04fcff3dfed799f0692d97299398815f_JaffaCakes118
Size
59KB
MD5
04fcff3dfed799f0692d97299398815f
SHA1
c5b12c93315a3b405bde20ea849d9647b6d81204
SHA256
b0656b1e7e7037cae2d2c4cc54ed3582de9eba1a41512d163e02d359ab63bb7d
SHA512
929d95c0a7dedbcc9880d9892aa5cf4ae6ba61d624d268b29602436b819f227610cd759ab9b5a39125cf33b0b853351a3ff908303ab98dad7feba1244f814527
SSDEEP
1536:EGqriHVQeVKsCWZdj1PMHFDWgzN8Ja4V4YaHDAgKRGxM+:EGsi1jPjKzogYzJRO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
04fcff3dfed799f0692d97299398815f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ