Outt
Sett
Behavioral task
behavioral1
Sample
16a8736d37aba77d30b5775f45cb757b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
16a8736d37aba77d30b5775f45cb757b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
16a8736d37aba77d30b5775f45cb757b_JaffaCakes118
Size
58KB
MD5
16a8736d37aba77d30b5775f45cb757b
SHA1
7a61b39769a191be32cb1bba0338ad2300682f92
SHA256
9c14b28c0ad0e395be4d850338723948e040fa3710e49e503ff7e06024896a10
SHA512
f92bcae7f71df4265f4b45f5c2bfc92aef65c7f63ae382b25ac01fbdd22b6a4bc02a5f39a895e3fbca9d689b56f8d770d39adc100c43c33e54159a4e40cfdc2e
SSDEEP
1536:23umoMtxsW+qwpFSONJ1QXmJNen5h5+ash/H8s0Dzv:CoMtxsJT/L1rc5hqh/H8JD7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
16a8736d37aba77d30b5775f45cb757b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ