Outt
Sett
Behavioral task
behavioral1
Sample
24f338a98e1c5792dff4db29e4f24330_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24f338a98e1c5792dff4db29e4f24330_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
24f338a98e1c5792dff4db29e4f24330_JaffaCakes118
Size
62KB
MD5
24f338a98e1c5792dff4db29e4f24330
SHA1
499a4ebf4ce7c0a71fbfe0b89ede807d8c582ee1
SHA256
054d0aa5530ce6b25ff453538c0d793134f1573f5cb6c159f48bc045b4c00a4c
SHA512
8953cf0413244981adf38443b955e4972d4b250a01a3c16a5f29f1b1ce1d09b9df2d883ca740938f3ab71adbf83703cb3f353589d11d83549e5c7321f023c128
SSDEEP
1536:mPO6KEVbsVP0gkMfC7wu1eegj5ib04ZYDXTCWwJ6gR0Pkp:cMEVbsVchXwbeg1wZo/C6gRckp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
24f338a98e1c5792dff4db29e4f24330_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ