Outt
Sett
Behavioral task
behavioral1
Sample
26a294948ed478d20cf15df67bb5e811_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26a294948ed478d20cf15df67bb5e811_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26a294948ed478d20cf15df67bb5e811_JaffaCakes118
Size
65KB
MD5
26a294948ed478d20cf15df67bb5e811
SHA1
263166902387ea0d26d52c3413ebd8fabcebb9dd
SHA256
01fcf827c57b153454b2e207ca9fd420ea1ce8f470ca20375188b09d21ba6333
SHA512
51852bcb4610bdc2e93a8426bac825d88e59492568b5207ba650c066bd42569cf24d5c63aedcb877a34f94f253ff582cc04486157a9772b09707b5a93788088f
SSDEEP
1536:yl3E0TDR8CcrnDYY6esz3cawGOejfyNu8S2:E39fm7L9igjGOdc85
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26a294948ed478d20cf15df67bb5e811_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ