Outt
Sett
Behavioral task
behavioral1
Sample
1abe1aff0a4168e581940e6f6ae793fc_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1abe1aff0a4168e581940e6f6ae793fc_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1abe1aff0a4168e581940e6f6ae793fc_JaffaCakes118
Size
62KB
MD5
1abe1aff0a4168e581940e6f6ae793fc
SHA1
13902a7709986fd0b4075f9bda475fddc817d5ed
SHA256
97084184629a3182728ac0f3706bec384cb53d3fbbf1e3a61801f9caa0e762bd
SHA512
31bed8d0c1b39c357cef1f892d571f3ec2fb7ca44681a1b027b3d0636c4dd9c6c778862357bde3397b059892efd159fcf49ab779ca1bf1aec1e47e5b9c06ef98
SSDEEP
1536:23umoMtxLXBGptaHm89lBgrWlb9xShwV9O:CoMtxjBHmclGrGb9xShn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1abe1aff0a4168e581940e6f6ae793fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ