Outt
Sett
Behavioral task
behavioral1
Sample
15a20fa2a984d471138a5914bcb31e14_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
15a20fa2a984d471138a5914bcb31e14_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
15a20fa2a984d471138a5914bcb31e14_JaffaCakes118
Size
67KB
MD5
15a20fa2a984d471138a5914bcb31e14
SHA1
8e44b5bc38dfd513358e666c19fd972e6dac2ffd
SHA256
a1fcbc845f5c669f9bca3e0cb7c9a3bd182f5070f419ed477352eec33f7c2d70
SHA512
8bba562f9041b78b69f51e2052035a66ebefefb92a24c65ea79a9e8df2ba1171f0f7999cdbe82b75e8e69437391669b1548853550d9716e4ac5ee2ce47f3194f
SSDEEP
1536:Bm1NGJVGG77QRBHCiThq0zhvbVgyLMYFuFhgKGn+fW53n3x+89A:kX0VFepCiThdldXFubLGX533x+89A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15a20fa2a984d471138a5914bcb31e14_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ