Outt
Sett
Behavioral task
behavioral1
Sample
25edf9a080d013c4f2ecca57fe0b951c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
25edf9a080d013c4f2ecca57fe0b951c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
25edf9a080d013c4f2ecca57fe0b951c_JaffaCakes118
Size
75KB
MD5
25edf9a080d013c4f2ecca57fe0b951c
SHA1
835a238b254411cbdd82d0a9098599daf1049b41
SHA256
c02761a2d66532f8494a7c47b747d41c1beb6667c64a9e6e1909bb1b29b62be5
SHA512
56a2d8306ea5c07113492716d219150458853742486a12574fe28a26879c7b07d8511e4d07ec1a7ee5960602f98f708d9955a1b7db8fb6312b051c3b796bed99
SSDEEP
1536:Bm1NGJVGCx1MQfwPFaqs6IK3mv+orC4ep/yAbRo6OrHXVTBaNm/2Ng+g3VNgRC:kX0VFx1hY8qnIbv+IepBo6KhBONgfsC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
25edf9a080d013c4f2ecca57fe0b951c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ