Outt
Sett
Behavioral task
behavioral1
Sample
23120249193ab72cdd8550298759c75e_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23120249193ab72cdd8550298759c75e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23120249193ab72cdd8550298759c75e_JaffaCakes118
Size
46KB
MD5
23120249193ab72cdd8550298759c75e
SHA1
d9c799fb2e563f9ea18bc68ccc149c47c8947189
SHA256
2644f30519ee54b4fdadedda1358eeb9da53f88eab460df91341837f3eb94f39
SHA512
4df398d18915e33a7a1e8a7b44d764972f906c66a4f6efd9473dc7d40651d9c53b436497356213b2b81860f3ad2377ada15f16158d01f9c9fca2ab95fdf8bc1a
SSDEEP
768:56IRmOOu6t2VK7vxvCk3Z3ceYlFxW6u2p2en3rf5yEeMvO5:5jRmOqM059Z3hgfV3rsEC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
23120249193ab72cdd8550298759c75e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ