Outt
Sett
Behavioral task
behavioral1
Sample
155add60ac852d332d8cdfe3de504536_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
155add60ac852d332d8cdfe3de504536_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
155add60ac852d332d8cdfe3de504536_JaffaCakes118
Size
73KB
MD5
155add60ac852d332d8cdfe3de504536
SHA1
086e747149c712675fffa56e4958c29f6f2959bc
SHA256
8ce880662111eb51e4720714d2d6eb6fc2f343ac3efbb404dd2e784fa203acd4
SHA512
81982de560234e71eda15e698532e37b0b74eb6376aabe33d890d5948af271f399555e4a5469b8fb0c800c261c132a43f73bd839c39e0961d5f91974079375ea
SSDEEP
1536:p+CZ8LwKKjTAaPwAw9rl0UE2wv/3J++5wlSgS4BX0FfiVQTcWI4JR+r:gXELPzK6vJ++5ZgNBEVNTNJR+r
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
155add60ac852d332d8cdfe3de504536_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ