Outt
Sett
Behavioral task
behavioral1
Sample
262567401e1750fa5329a88a94e8c485_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
262567401e1750fa5329a88a94e8c485_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
262567401e1750fa5329a88a94e8c485_JaffaCakes118
Size
86KB
MD5
262567401e1750fa5329a88a94e8c485
SHA1
8a82338f05cb47853bf2954d2779218173145238
SHA256
2e2b3122c1ea1a1ddd0875218552825dc6bd286f67219e281d1e9dd6fdb97098
SHA512
a0595413e98e6eadd28b598688d6f06ef80793eedf022861b9ab57fbb482802c9dc6c424231cc24f1f6a68f18a4392f6f3e8a3f1f34a78752ef1066fac1408a5
SSDEEP
1536:mPO6KEVbsVP0gJloCiWfH0VDEl7gSZipixHNy+AiKuZNHbQWeuaSaW1Oz+RpiWwF:cMEVbsVcYoysnSZicoiH8Fuf1XRoz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
262567401e1750fa5329a88a94e8c485_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ