Outt
Sett
Behavioral task
behavioral1
Sample
1c80bc612678b3d94e758dce31a2e631_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c80bc612678b3d94e758dce31a2e631_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c80bc612678b3d94e758dce31a2e631_JaffaCakes118
Size
66KB
MD5
1c80bc612678b3d94e758dce31a2e631
SHA1
9b7ad0288f39ea25be098dbafe35dc10e2709839
SHA256
40cae1c8b773e5552e8c8118af2e346a646b16be6eb35476dccf5ca78e6263a0
SHA512
c7539489eb9f6938dc50e57e883a2b43583cfcea8b9b6c5814c55893900efc1807184d84462396ea3ad68c61d9ef39b77a5385f74ee39aaaf6afe04f19bb9545
SSDEEP
1536:EGrINHx5hCoq7D1zXMl624EyGUrf0EzenowTSkI7b9l:EGry5hHmD1zXg6dXGUrDaSk4l
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c80bc612678b3d94e758dce31a2e631_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ