Outt
Sett
Behavioral task
behavioral1
Sample
298c9d99d0556afdfa51a35f82f45d0c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
298c9d99d0556afdfa51a35f82f45d0c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
298c9d99d0556afdfa51a35f82f45d0c_JaffaCakes118
Size
48KB
MD5
298c9d99d0556afdfa51a35f82f45d0c
SHA1
32018f196a61b26c505603ce844fa0ca9d46ddd1
SHA256
39acf6099374cc3992cb6bec3b78186ba0229adc33674d7469814fec1afe55a8
SHA512
3e8ecb57433e90ded1caa5c61e63e40bb21e303e8d82a53b4367f3e94f2acb2f360b454c2ec127efa10b36a1c6f19372d930a2f7997fe4e0688af4352fbaacbc
SSDEEP
768:1zExMf4sJGHw2jnKFOL7Mvn47sfvF6iiaqubIGr2fhCGgzlwiE1s4A:1zExMwCGQ2jJO47QvF6wq3gzlie
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
298c9d99d0556afdfa51a35f82f45d0c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ