Outt
Sett
Behavioral task
behavioral1
Sample
268cec5f176b13055b956b1424862aec_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
268cec5f176b13055b956b1424862aec_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
268cec5f176b13055b956b1424862aec_JaffaCakes118
Size
65KB
MD5
268cec5f176b13055b956b1424862aec
SHA1
058076aa12069930d1c9f89bcdc1c8312e7967aa
SHA256
035bca8cf306774e283d717f02d81f746dc5042146b8034b6f7f2b2015eb2a6c
SHA512
a5a2401175761e38e6906a3442c2c8a99bee64e7a2d8622719c24daed014168d457c5c9231384ed82fbfc6a6aba126da0d6f5ed33d696891b19618703d93795a
SSDEEP
1536:MhBRVgrExucMWRrz6BSZGenDpuAaZ8YiTs2UuZDy:cRRsMnNQ0v1Uj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
268cec5f176b13055b956b1424862aec_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ