Outt
Sett
Behavioral task
behavioral1
Sample
28fe4af5a953d620b645d060b089a942_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28fe4af5a953d620b645d060b089a942_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
28fe4af5a953d620b645d060b089a942_JaffaCakes118
Size
69KB
MD5
28fe4af5a953d620b645d060b089a942
SHA1
76e3854eb7443131124e24438d11ed017cadde60
SHA256
b02fddb9800768be3928bc8e6f3a40293a0c750ed66deb9630d50486cf9b6e84
SHA512
5849cdf591fd7b482f91c5a8ea5226ca50131dbcf66d316b10e102b6a96a5bed05ca3403948b3f6eca8babb718e521bd4b3bd73e02e0d3a931f27e51aad39952
SSDEEP
1536:RVaps4jO6I51trWpl8ZD26Sl4wNk0X/yXUAl9/7:TXSI51tqpYhKtN9XA7D
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28fe4af5a953d620b645d060b089a942_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ