Outt
Sett
Behavioral task
behavioral1
Sample
1542c6732f8e6754e9769a8f017e3f4b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1542c6732f8e6754e9769a8f017e3f4b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1542c6732f8e6754e9769a8f017e3f4b_JaffaCakes118
Size
69KB
MD5
1542c6732f8e6754e9769a8f017e3f4b
SHA1
7f1d363de23a0f59a5633c0aaeada2c173445782
SHA256
56df95c1c75266aba8880f3debd9f07f8ddae92fd381755d2c64280bed997da0
SHA512
c28a89ba376bcb03476f0e01d2e3b1e59bc8769eaaaf82d16fa612fcbc37275256da5611c744242fe3008c51315e22eb299a75ee1e507dd5b3162a042df07d34
SSDEEP
768:9xBtKtqyLUZJGZ0p/dlzQjlqbJ7EkkkNKf7POi2dmmbgtWaf5it7aLxHsHKZj1h+:9jwZEzQBMzqCBdt0tRhw7aLxiKZ0MnHq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1542c6732f8e6754e9769a8f017e3f4b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ