Outt
Sett
Behavioral task
behavioral1
Sample
1b3179fae7bb19c1816443e9399a2c5d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b3179fae7bb19c1816443e9399a2c5d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1b3179fae7bb19c1816443e9399a2c5d_JaffaCakes118
Size
64KB
MD5
1b3179fae7bb19c1816443e9399a2c5d
SHA1
8c1875b793762b3fe49ebf1673812e80d7e37987
SHA256
72ee396e25be1ab18305992ba2095abaedb23d9d2e4f7510995ee2eacecf371e
SHA512
280ba8c25e6b7cac9972046503d6c007c5fc27202a5cc12da78cc713393b7a9bd2a9a60328ce399b845dc18371cb479233edb151626566d7b610b5556acbb00c
SSDEEP
1536:APqmOCbgtM9gCdwp4S97/pklbUBL8OFZqOzVm6xWBHwqX:cqmAtUgCdwp4S9ylb+F0OBmzBxX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1b3179fae7bb19c1816443e9399a2c5d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ