Outt
Sett
Behavioral task
behavioral1
Sample
1c42212ac4bb7e4db9cc502bd48d54b4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c42212ac4bb7e4db9cc502bd48d54b4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c42212ac4bb7e4db9cc502bd48d54b4_JaffaCakes118
Size
36KB
MD5
1c42212ac4bb7e4db9cc502bd48d54b4
SHA1
befef619ef76a1a3e7cc9b9d1791821706d6bc5a
SHA256
bead04fc467f53f08d0d431bbaad007e0b84ed38ea789aec6f88ba1ca79542ce
SHA512
1bcce049b0acb97a589aa9747c236ad21fe8b429ac9c67581e41debb70db86ce3ea2575d42104d28053ecf235403e2a8e1993dc188b35eec9fb72b277102d094
SSDEEP
768:YJEp5e05ZVKjywYH46/RpxAtswIpOp+UYtATT0O/:YJEu0nVK+B/Rpyh35TTB/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c42212ac4bb7e4db9cc502bd48d54b4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ