Outt
Sett
Behavioral task
behavioral1
Sample
1a2d0d8c0242ff2fae7407b464387ec4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a2d0d8c0242ff2fae7407b464387ec4_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1a2d0d8c0242ff2fae7407b464387ec4_JaffaCakes118
Size
69KB
MD5
1a2d0d8c0242ff2fae7407b464387ec4
SHA1
34c0be8e8b2c8ed761cbb01e7ca04a47a8d41f3b
SHA256
6acfbbb46c84d10d23abbc494f27285357e1afc39bbb248f4dbb54bcd4babab9
SHA512
10015634392cada8ffd3299c551ff1e1133d8af7c37f717213ff69839af6ff873a60eb6c35c771ff3b33a80f371a8254d19580968ac6a1d93fb4e84b50e2d482
SSDEEP
1536:evbem+hRTtJvIJUzwL17iJNGrpJ8098z0wIXpVTsAi0OQG:2enTGD9iJQpJP8BIXnTm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a2d0d8c0242ff2fae7407b464387ec4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ