Outt
Sett
Behavioral task
behavioral1
Sample
29f5a744a23bbf9cf404818684c2c420_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29f5a744a23bbf9cf404818684c2c420_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29f5a744a23bbf9cf404818684c2c420_JaffaCakes118
Size
61KB
MD5
29f5a744a23bbf9cf404818684c2c420
SHA1
bc5d04f080e7079053efb75c3e60aa4b9d7ce439
SHA256
82c67af26862a4b5466d73810aeddb02eef60885ec96d198eaad942833cd10dc
SHA512
dd08dbd824af1044cb8ca6f4d17f5480eb6f4e996761e0ee4f93b47c8f9d94362668168d34357a7afb35d3c17403e1092f0c430f1530071612fa02d039f37ea2
SSDEEP
1536:1zExMwCGQ2jDkOxlRLyV8Z1AgqH+7Prx0yZBIO6rQ5fm1DDCmtGl7FW:1I+wCGvsOBu81AgBzxPZaO6rQ5e1Dkls
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29f5a744a23bbf9cf404818684c2c420_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ