Outt
Sett
Behavioral task
behavioral1
Sample
2308027aea0ab7245ff645ae527fa32f_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2308027aea0ab7245ff645ae527fa32f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2308027aea0ab7245ff645ae527fa32f_JaffaCakes118
Size
71KB
MD5
2308027aea0ab7245ff645ae527fa32f
SHA1
78fd10cf9c5531bc59872385793e5627b50451d7
SHA256
1fb8eb75fb752ea6b25bbcebf5023e71f2ea20cf85fbe0eb38facbad1260415c
SHA512
e2d26276318b9341b685ee304767e530e5afca37cd470f171cde8767c703e16d0958f2167cf5b5ba8b90293ec5d605dce84b89eda9819a0270eb78fbc6f1b3b7
SSDEEP
1536:agF0eiyUcbfQYMTE4mpqElPnE2Pbv/ycz9sNxZHBPtldTp:t2yFzQYSZ2Pbny3f59
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2308027aea0ab7245ff645ae527fa32f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ