Outt
Sett
Behavioral task
behavioral1
Sample
21dcda9b0e7136284415931e33063352_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
21dcda9b0e7136284415931e33063352_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
21dcda9b0e7136284415931e33063352_JaffaCakes118
Size
57KB
MD5
21dcda9b0e7136284415931e33063352
SHA1
c1171cb706afea0c00dae4ace87fcbcd1d382b33
SHA256
746c72dc3ead098a5a74d9cacc44d54979697e15c3011436c3b21903a6ab6c57
SHA512
926319892026e4e3c619f4f432b3b9526049710230a132b341ecda775ce42bd02561d508326b414cb1aa7a9073f0ff17b733a1627bab1da3b77a443ef06a85b8
SSDEEP
768:hM1opOjOOfwvyPopN6A8+TNXRjY0u8lscbnNZw9abG69lxKJk+V6dr:anRjoP69+BXm18lscDNBLxIVG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
21dcda9b0e7136284415931e33063352_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ