Outt
Sett
Behavioral task
behavioral1
Sample
1c563ea6bc4223c661132f24a969f1af_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c563ea6bc4223c661132f24a969f1af_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c563ea6bc4223c661132f24a969f1af_JaffaCakes118
Size
51KB
MD5
1c563ea6bc4223c661132f24a969f1af
SHA1
0e92b2a367aa6d6bc2c87642392a26aa525a9ce5
SHA256
93b22ad1b243c1d336938e02bf7c5df237a08cab78d27d2a888025e03171452e
SHA512
019c5bdc096fd0dc47f5aed9c56b7362898ea0b03e48fc2834232cd92b0bbb3a07c421cafb05e15c18be4bd7110608754aa3f9e017addc02713aa7142ffcc842
SSDEEP
1536:23umoMtx9qksLNbn5zNPQfgDdKI33szqqYZ:CoMtx9qvLtcIDdbszQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c563ea6bc4223c661132f24a969f1af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ