Outt
Sett
Behavioral task
behavioral1
Sample
0a3f1d3644da6ba8cd020aff62f93da7_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a3f1d3644da6ba8cd020aff62f93da7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a3f1d3644da6ba8cd020aff62f93da7_JaffaCakes118
Size
54KB
MD5
0a3f1d3644da6ba8cd020aff62f93da7
SHA1
5d855e49b360459e584f3ce270b8d59f993c8439
SHA256
6873b447f8e61827bfd10c5cf1bd5782c1bb39d538b466bd180314005d35527c
SHA512
95d13d8adc1c6ad1b92868c6f2d7992e7ca1ef7859f1e6853e476597c9e30a1f5fdf60a2ec8aafc674211b86368ecf1e8ea931ae3bddb049708b54bfdef9d4af
SSDEEP
1536:GQ3tfgXKEA0mvL/Z+QX1YD/FaeO7UrsDnI31KjVKW:VfgXKEjeoNaeOoCIQKW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a3f1d3644da6ba8cd020aff62f93da7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ