Outt
Sett
Behavioral task
behavioral1
Sample
23f4cba91a57ceb735bd2c22362a64a3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23f4cba91a57ceb735bd2c22362a64a3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
23f4cba91a57ceb735bd2c22362a64a3_JaffaCakes118
Size
61KB
MD5
23f4cba91a57ceb735bd2c22362a64a3
SHA1
13c738a89220396138fc16eb8b48c8d37f9cd556
SHA256
01e6714397e3bfc07bb8e3e35da1700c4300cb3f9c8b9085cfa5ff37a135777e
SHA512
26909192dc13b8d7c762d5d410bb56c365d4023bfc58d0833b4db03ef79b75315f267584658ae811c18fcfd85b0ca65e4c390d302fe0b2511085db66a801d895
SSDEEP
1536:998+F9MR9kyrymr1rTw9i1KD11IbfiYdI:TJyryK1rTw4KR1RYdI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
23f4cba91a57ceb735bd2c22362a64a3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ