Outt
Sett
Behavioral task
behavioral1
Sample
0df1501b341ece5b587b97f7f2eae15d_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0df1501b341ece5b587b97f7f2eae15d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0df1501b341ece5b587b97f7f2eae15d_JaffaCakes118
Size
66KB
MD5
0df1501b341ece5b587b97f7f2eae15d
SHA1
1a237d89a31d0ae279016c5b52bcbd1dce309457
SHA256
b6e0b8c4191f310cb427e247e95e3604190282a8f2c068dfedca50118255dfc1
SHA512
9bcc8bd084512a946b9a703f9c794d4a486a16836777327633d94ec9fa185547d82eb240d879341ecd5229063cd17d637ae3447f529933d1f04cbf75a5cd7d9c
SSDEEP
1536:GQ3tfgXKI0DhdCYd8KLQhb5jNEy+geM5/ycvQJwHpfmr4:VfgXKIs7CC8ln/ycvQJwn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0df1501b341ece5b587b97f7f2eae15d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ