Outt
Sett
Behavioral task
behavioral1
Sample
268f083dca15470d1c4b39b4ae255da4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
268f083dca15470d1c4b39b4ae255da4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
268f083dca15470d1c4b39b4ae255da4_JaffaCakes118
Size
61KB
MD5
268f083dca15470d1c4b39b4ae255da4
SHA1
87a3689cb7a53c3ffd70151b7233902bc8ee11e0
SHA256
a50264cfa8aff6b449a088456805c29b7cdff2179a98a2a1023aac3cd6e69a57
SHA512
7f46944f212a470540ad51ccaae5567f0c0f42002ba12e344c7c6170b9b598521e2c412c4d4710a540c9e56369f2ebc946f255f082c21c3b02a3aaa04747f23c
SSDEEP
1536:n7ZLNPp9pZBMKC9O7A3iuVvHU2Z3ACKH8sEAZbzD:7ZppFC9s+fVM2FKH8sEKr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
268f083dca15470d1c4b39b4ae255da4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ