Outt
Sett
Behavioral task
behavioral1
Sample
24121a8904654eaf8a78bbd970d9b776_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24121a8904654eaf8a78bbd970d9b776_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
24121a8904654eaf8a78bbd970d9b776_JaffaCakes118
Size
65KB
MD5
24121a8904654eaf8a78bbd970d9b776
SHA1
cbd5374a57a52f33b74be01673e3a664d94f2124
SHA256
347f3a92bd7e7e061dd1cfd4b0bdba79a030b5ee6ff3c908d28205014f2e06a0
SHA512
2577790ce954d00db8ad10647f05b4f7d0bd3ce6823e795a92980cd3448a3bb802b8644bd7077c6d293edab643c4506c5e7c07d093a5c17b35ef52fcd410d655
SSDEEP
1536:yl3E0Tazxw1j+K1BTtDUFfo7UU5rHd6Smjg5Kk8:E39OOj+KzVUFchrsSZ5n8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
24121a8904654eaf8a78bbd970d9b776_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ