Outt
Sett
Behavioral task
behavioral1
Sample
26c0ef58c7b0d0563d7952cbf7f6c139_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26c0ef58c7b0d0563d7952cbf7f6c139_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
26c0ef58c7b0d0563d7952cbf7f6c139_JaffaCakes118
Size
65KB
MD5
26c0ef58c7b0d0563d7952cbf7f6c139
SHA1
67217e3c08940455b074688d428766e4222a1df6
SHA256
0dcf48fd8f43f2af52e65729cb583728cd7b8ec3aa19360ae44e0344528444ee
SHA512
112b9a17176328eb5258be97e978d66601e6d7ca518ea8f5239a9fff46f80050a013d594b139be8dfb8d320d42b3c0620b3a01a58a3d40afc7a7827009dbe8ae
SSDEEP
1536:yHZxQEGJmIEw1qrkJNyZz50mVk3KB9QLU1HPfpyh2y4:yHcEG4IEw1ckJsd5Fk329QL6PfcB4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26c0ef58c7b0d0563d7952cbf7f6c139_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ