Outt
Sett
Behavioral task
behavioral1
Sample
1c5113318c8c6e39d1749f095e8c2100_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c5113318c8c6e39d1749f095e8c2100_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1c5113318c8c6e39d1749f095e8c2100_JaffaCakes118
Size
64KB
MD5
1c5113318c8c6e39d1749f095e8c2100
SHA1
544cf03ab9d96b1f83450f0b89f780434b803f00
SHA256
fcb97782d2b34c371dfc1fa7f69fcfb48e199238723860d2d1faf7da5e32dc42
SHA512
17becc4c0235ef065dc758c95d1a4a03d7d08dde50cfa334566a74adf60a996149a8e5a0a9bb9e00a97a75398d95b0407e57709641603122d95cfacdf1a6cc1d
SSDEEP
1536:MhBRVgrExucMIhGQYyyu+wmm+vEOn985sALa4Lfq:cRRsE3ypwmmVOnRAL5Lfq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c5113318c8c6e39d1749f095e8c2100_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ