Outt
Sett
Behavioral task
behavioral1
Sample
159a2348de2789b0e3b1170d76007e88_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
159a2348de2789b0e3b1170d76007e88_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
159a2348de2789b0e3b1170d76007e88_JaffaCakes118
Size
56KB
MD5
159a2348de2789b0e3b1170d76007e88
SHA1
59b4ad68cd30188855140cc5ff4b8bd45335f4e1
SHA256
a16970403668b37dd44c8c0fcbf9bf897dbe9220dccb262c7d3b2fc86d3bfae9
SHA512
c7bf6c8e0cf5d3d9f00d440b03b1e0e388754c42a85bcc3cd1670790b1e0e360be81086b9061f8c96ffa67c04311a30a84a76ee9263e8ed52e2071072c0b0367
SSDEEP
768:9xBtKtqyLUMAOIyn+G0nuIM+RR8WTYJZLO2oeGhD77njttKp0h9DjduYbfdj:9uVZGnvTCJZKR77jnhBjIYbFj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
159a2348de2789b0e3b1170d76007e88_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ