Outt
Sett
Behavioral task
behavioral1
Sample
1a020f251bbcafe806bbd72cea212e3c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a020f251bbcafe806bbd72cea212e3c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a020f251bbcafe806bbd72cea212e3c_JaffaCakes118
Size
55KB
MD5
1a020f251bbcafe806bbd72cea212e3c
SHA1
16cd4220cdbd3de1fa0f02ca8f21877b3c4dbbe3
SHA256
9b3b3c96bf060210811ce3884a267bf40ce06bad36eec4cd92599a79c46eb325
SHA512
c0013e128a36f60314fc0f9fa0b076a35769b109f76905d24f1aecde81151123a7525d96e46b44768b7d059e3907c31de6346a1898909a9c14cb0f98a0e9f5cf
SSDEEP
1536:MhBRVgrExucMwiTFAPiIh3HYq7/xLAC9rZmD:cRRsO1PJ3YQLAC9rYD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a020f251bbcafe806bbd72cea212e3c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ