Outt
Sett
Behavioral task
behavioral1
Sample
24602e37b3c9f558e158c2d6369e8619_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
24602e37b3c9f558e158c2d6369e8619_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
24602e37b3c9f558e158c2d6369e8619_JaffaCakes118
Size
77KB
MD5
24602e37b3c9f558e158c2d6369e8619
SHA1
3812aeaea3ebc0408d485f52d327b9d0705e7d3b
SHA256
89aafd744670e6a7b6c88061a2b429b92e9901a4b598336bfb4c5cb150c1717d
SHA512
44c81a0cc673976c736f54bf16965050dfed388162801492ec856dfc64c13d8378b4f244bd3977e5796691f82f2958f5c269b80a38f350ebad3d4c12565e8a15
SSDEEP
1536:VZIcCxR5hN63oR1V4r2YI0s16hVB/DnoUirXF5vELne7y+yENPY:r+Hf63obV4rEN16hVdTTirXF5vEL9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
24602e37b3c9f558e158c2d6369e8619_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ