Outt
Sett
Behavioral task
behavioral1
Sample
325fa3b8681b034c206db14ad1a98373_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
325fa3b8681b034c206db14ad1a98373_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
325fa3b8681b034c206db14ad1a98373_JaffaCakes118
Size
77KB
MD5
325fa3b8681b034c206db14ad1a98373
SHA1
fbaebce5e5ee01a4c438b8c44f89ffacba6d1348
SHA256
2fc2ffba122a4df89e695d96afdd92b9c73af70d74b30dc8cc0776e41c9c3c26
SHA512
61b1d5de747f668497dc92b940bb7d492fb9fa4c39a3cf8df17772f530777fc8457ff27f57ac5a7b924e1787ab454af44cc63c3841e90128c0849c9444a87761
SSDEEP
1536:mPO6KEVbsVP0gVoodnon4DByjxWj9Xte7RX8WD9Tvjc9vwTv:cMEVbsVcYXdnfyj8jeB8i9/cWv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
325fa3b8681b034c206db14ad1a98373_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ