Outt
Sett
Behavioral task
behavioral1
Sample
27810e5d971ed51c652ecb0bb4189045_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
27810e5d971ed51c652ecb0bb4189045_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27810e5d971ed51c652ecb0bb4189045_JaffaCakes118
Size
54KB
MD5
27810e5d971ed51c652ecb0bb4189045
SHA1
13831d7bf2d30fb76e9bc33fd04ebd2fc665370c
SHA256
3174690af239c37dc1e07571def0f3c2c633b8f7609183827abb823be10d8d2e
SHA512
273475c894e9c315801fc242238c752fb7bb5e77e47348821f3981c41f86b8796c83bed1a59798ae7bb8b015d198a240916165c161af7ee8e3977d8b565264f7
SSDEEP
768:56IRmOOu8mUF5Is8l4d1xjmcW5cBbJDkAZkqYLy/ClD0Iiyp+Fy6WRdD18vo:5jRmOpW1xjm86z7D0rFyhZEo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27810e5d971ed51c652ecb0bb4189045_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ