Outt
Sett
Behavioral task
behavioral1
Sample
251960fb5b372f6adcd469189a6e5134_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
251960fb5b372f6adcd469189a6e5134_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
251960fb5b372f6adcd469189a6e5134_JaffaCakes118
Size
50KB
MD5
251960fb5b372f6adcd469189a6e5134
SHA1
4e5c4262a5b923e61579ffa371f235a38f748329
SHA256
0538203ee4a136e601c183bb78882dafc22cfb8f8df8770c89e01388d901d914
SHA512
aaf1ef9264904c978822edc563f19b24297f08ab718f2884e0acf16cb62567be7437eb851e1c8212d44b57b40353d0b63bc8ec3b1de6098d2dd6e2ed23c14c4a
SSDEEP
768:szM2xVV7ydgAKx3+aYdcXU96rUJ/iHnlxEkmGbBSQra/VA/g73WtYfAOQcfm:V2bZyd/Kx3pYde0gbEzGbgQra/6WE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
251960fb5b372f6adcd469189a6e5134_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ