Outt
Sett
Behavioral task
behavioral1
Sample
1aef805167821497c23dc9bb355dd397_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1aef805167821497c23dc9bb355dd397_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1aef805167821497c23dc9bb355dd397_JaffaCakes118
Size
51KB
MD5
1aef805167821497c23dc9bb355dd397
SHA1
7bdaf4a3673bb0f5988a01a9c6d84359f8069aa6
SHA256
b620a05deeec9d584a2b712cc979061ca6fd4138cbe87ea04b033d83df280ba3
SHA512
37bf2c72af7bdb3e2acde3db0b7ad2a820e581eedc238cbdf1d2ef8b81782db99195117e1c8d89375a24f1547404c597383ac253cc2095839b2b4a1a34cb45de
SSDEEP
1536:n7ZLNPp9pZBMTwS3MdI1IU+7euvXEnnZlyq/TrMb:7Zppq3mIl7YXMnZoqLrC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1aef805167821497c23dc9bb355dd397_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ