Outt
Sett
Behavioral task
behavioral1
Sample
28e93173ca235b488791bfe437bf9705_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28e93173ca235b488791bfe437bf9705_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28e93173ca235b488791bfe437bf9705_JaffaCakes118
Size
64KB
MD5
28e93173ca235b488791bfe437bf9705
SHA1
8b5305760e5558aef8a72b36107470de391c7a22
SHA256
39bd57a166294fe8d17a13fdcf93345d3a27fdddb06fdcbccc20a3b2b82dd486
SHA512
c9e95c2ea4a16fcf8c6dfeb8cf184621f5e1d2e2fe20b1b828c1e281ab5b1188ffb26529baad3a72f2e7084b70555da51e279796dd42f27d1b336d3796ee3220
SSDEEP
1536:EGY/n/qt4XMIgvL5gb2+RG5arUnacn9KSHQ:EGOg4XMFj5z+wcsnkSw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28e93173ca235b488791bfe437bf9705_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ