Outt
Sett
Behavioral task
behavioral1
Sample
1a53d0c3d88bcd7388826975044d027c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a53d0c3d88bcd7388826975044d027c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1a53d0c3d88bcd7388826975044d027c_JaffaCakes118
Size
64KB
MD5
1a53d0c3d88bcd7388826975044d027c
SHA1
29996a3cfa9dd73e2152764994102d961cb8844e
SHA256
57f44949c58c79018fa6ec978d2cff1f7fe89dd583bbccb835243caa84958389
SHA512
4cdba542070994e1881883213dc748922215c40d99b20f50bf85cec8a415171c1ff2f195a69f8d66b7014d85293faa32a1ddd427bb818b02735e9c01bbb86161
SSDEEP
1536:1zExMwCGQ2j6kwCCS6+4yd9VCrB1CKGO5sHOZ833QaChmyKcbCvN8f:1I+wCGv1L4yd9VXKGUsVHQaMUcbw8f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a53d0c3d88bcd7388826975044d027c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ