Outt
Sett
Behavioral task
behavioral1
Sample
1471bae36096f8788358fa4cb5ce0d47_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1471bae36096f8788358fa4cb5ce0d47_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1471bae36096f8788358fa4cb5ce0d47_JaffaCakes118
Size
50KB
MD5
1471bae36096f8788358fa4cb5ce0d47
SHA1
b1d28379a2d86e782834468d9a75ec265715cda6
SHA256
8443b97f5e219bb8b5deb7ff5089abb88594c8e158de51374a43c79992a49c5f
SHA512
c54c487fab0e99d8cf99cef3e4d1b33d5f78d2ca578d8a235e90aaff1d6b150bb85dadb6bd03a0d5734cb89998898ae2b3482ffa403780918eaaf2e332cfe54e
SSDEEP
768:GQxrhypDESkRA0HVCzXrx1KLD/qYFhzsMsYhMlEJSe/Kr8ghSdDJqSxQkHf/Y7Mb:GQ3tfgXKLD/q4hYeMlEJNQ0Pxp2tQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1471bae36096f8788358fa4cb5ce0d47_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ