Outt
Sett
Behavioral task
behavioral1
Sample
2368acbf8d9433ba44d29093649d8534_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2368acbf8d9433ba44d29093649d8534_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2368acbf8d9433ba44d29093649d8534_JaffaCakes118
Size
58KB
MD5
2368acbf8d9433ba44d29093649d8534
SHA1
27e1d3d180fc66cb0e6ffa3450ddbb73b579f9d9
SHA256
b43dc5be9de0f2e91676a774f64ea964821fa3816f42ec107aac29434949d5fd
SHA512
8d902ac23b2a2d609d24faefbe1ee9f5e0778029c978df7aa6a4a72388b3726e58cf6fb2bd1cd6d1038f94ebdef7d8563fbeedb03e1d7cd973fdd69188ec3489
SSDEEP
1536:evrztw3lHHVfP2P6HpTMFQafMjy4Rk9A38GzOC1zeM3u:Kztw39Vf+P6FMFQafMaANz/u
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2368acbf8d9433ba44d29093649d8534_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ