Outt
Sett
Behavioral task
behavioral1
Sample
14b8029b652604012185d270cb1f57c2_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
14b8029b652604012185d270cb1f57c2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
14b8029b652604012185d270cb1f57c2_JaffaCakes118
Size
51KB
MD5
14b8029b652604012185d270cb1f57c2
SHA1
1454a7292c7be957d7cd4fbbd8a34d71d0f3b3fa
SHA256
93912f6cb611d79a4b5a1a0826c8877302a06c1909d10aa227eb700091ab147e
SHA512
f72d8ab910df33da294229dcd37206b06440734839f26119b34f929b94e4d93e9ca29f1174d332fdd3f05b061b92b658d816038021f9727aa13d56f6ca207ca8
SSDEEP
1536:MhBRVgrExucM1rg6hj9/Rw3lcaYR4t6aJJe3Nl:cRRsLrgQZuYRsJJe7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14b8029b652604012185d270cb1f57c2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ