Outt
Sett
Behavioral task
behavioral1
Sample
18101cabb0c6499a3d8d0e48a70a3ed2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18101cabb0c6499a3d8d0e48a70a3ed2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
18101cabb0c6499a3d8d0e48a70a3ed2_JaffaCakes118
Size
59KB
MD5
18101cabb0c6499a3d8d0e48a70a3ed2
SHA1
2be5643309faac72582b1212f4cc9ba98a6e8ed3
SHA256
0eac09359ff886ac352bb42fa2945506f93b8fb6c0c5ecabff9c8ccb505c87cb
SHA512
92de9a6d1df743e7de5a2a448c899ee1bb7547a01798be0f9c75075cde253c6d68489de68118e83d856228bfd80da1b1b86d09e0c4508797d65911d25cc4e2eb
SSDEEP
1536:mPO6KEVbsVP0gtKQKjUsnF4B+r1ULDkm3EhhdB2:cMEVbsVcQKXjUsnXhKDFEhLE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
18101cabb0c6499a3d8d0e48a70a3ed2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ