Outt
Sett
Behavioral task
behavioral1
Sample
28fb5e8e2c0c2c8c80c4f2d352ba93b8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28fb5e8e2c0c2c8c80c4f2d352ba93b8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28fb5e8e2c0c2c8c80c4f2d352ba93b8_JaffaCakes118
Size
72KB
MD5
28fb5e8e2c0c2c8c80c4f2d352ba93b8
SHA1
ad712c20d6fd3f254ebcb7951870064972666bdc
SHA256
32613bf41406f4ae17f243dabc97aad7dc9707666407beb730dd69c6d1592bd8
SHA512
896905aae3177e4bfe7fbb74ef175a42c02c933ce35def1a33a6a25b8ec3e8e1ed3d51d87cf82f1edf71be7ab161920da4c2c4a31eaef8856be46627a6c64a76
SSDEEP
1536:Bm1NGJVGZGDfvCdcBrpWbZ8nHyh8Jz/vuc4lCNFABZVFnUjBrb:kX0VLTvmcB1WbZ8nTz3BQzPnc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28fb5e8e2c0c2c8c80c4f2d352ba93b8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ