Outt
Sett
Behavioral task
behavioral1
Sample
261765c9cd6abd19ca027d1849f752c5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
261765c9cd6abd19ca027d1849f752c5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
261765c9cd6abd19ca027d1849f752c5_JaffaCakes118
Size
82KB
MD5
261765c9cd6abd19ca027d1849f752c5
SHA1
5d5f6fb610b2669a54f4a759349bb28fba66b73a
SHA256
1c859a3aa61557e1cb0179327cd92c3d1c2711c801d2a062d931663e90ca2e1e
SHA512
1e885950005c9c22e7735c0a2d326459703cf6e72bff6e05fc1c77d9ff7fc5211a6757dae96e299569ad30e054a067375ab887253af494d4fc3d758c20ba16a8
SSDEEP
1536:1zExMwCGQ2jaclMwzd0Ba3RFwuw+b5YqVRGggT006jI+7+jdZxABUJYL9fQ5:1I+wCGvdTd0b9Cy4R3g408I+7gxAaYhU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
261765c9cd6abd19ca027d1849f752c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ