Outt
Sett
Behavioral task
behavioral1
Sample
0f7fcac165e35796d2849d2c9061a1dc_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f7fcac165e35796d2849d2c9061a1dc_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0f7fcac165e35796d2849d2c9061a1dc_JaffaCakes118
Size
69KB
MD5
0f7fcac165e35796d2849d2c9061a1dc
SHA1
423378150d1c146e2fc6180977b5dd7c81fe7302
SHA256
707ec57f91b7359aa4b2037fce2ecbbf90a6a9a367cc591ac76b320105bae66f
SHA512
aefeac3edb24b69c33e6537183f4ec0122b167163334a06826a792dfa03889966ec2828f133dcdba3dbd36c75afa8caea4c9b370affdabacb63c613f221b386f
SSDEEP
1536:RV5cUGkJTs3bGFFYskvQherOsUIRoonnpwqgElah:T5cUGr3bCFfkvoerYGoKnpwqgS+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f7fcac165e35796d2849d2c9061a1dc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ