Outt
Sett
Behavioral task
behavioral1
Sample
182865e20bc1649b9df09092a36f84ef_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
182865e20bc1649b9df09092a36f84ef_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
182865e20bc1649b9df09092a36f84ef_JaffaCakes118
Size
76KB
MD5
182865e20bc1649b9df09092a36f84ef
SHA1
b1e15c1a0139f869375a5acb7f4033625309af3f
SHA256
7f28634e523cb8b140af0e7bd8b13f8cb7a0f342eecef4eae3c1c8b36d047ce4
SHA512
955052b655a99da1f7c1a7da0909369bef31cf61dd7b9918bfdedba1b8a22da21467c85149e491edacb161741deb0e15c39d96f665ddd973b39cbdd45ee9cd5b
SSDEEP
1536:EGkJ6psExUrieOcBHeyzfPN1QRLVtpiYylI9CCxfN:EGS66qUWeBxzxWzaI9ZN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
182865e20bc1649b9df09092a36f84ef_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ