Outt
Sett
Behavioral task
behavioral1
Sample
279bd855f9d43e6dfe80f58902c11dd4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
279bd855f9d43e6dfe80f58902c11dd4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
279bd855f9d43e6dfe80f58902c11dd4_JaffaCakes118
Size
63KB
MD5
279bd855f9d43e6dfe80f58902c11dd4
SHA1
a3c921bcdae369a40b37695ae63f136d2df75c8c
SHA256
11541eb21d8cf55da065b77dceab68582b5aad64fff59206ece48b41c79da631
SHA512
0640409fd30c8e43d08ad7bad380ef1bfa5cbd156109fc917430caf11fefcef81c91a9edcda22bb1f4ba20f73f5f792b83ddb333fd84d19e48dcc85ed553c850
SSDEEP
768:h8WTpVT0X8zb00qtOPc49gzPep5Ww78ua0O7JywnHFqZN7e4zhLEH32FnF0gnuCg:RVI035+PcLVwHFg7e644Vth2cYNPUdo1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
279bd855f9d43e6dfe80f58902c11dd4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ