Outt
Sett
Behavioral task
behavioral1
Sample
32768fb8a07accae8ec1cd43c24b8f09_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32768fb8a07accae8ec1cd43c24b8f09_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32768fb8a07accae8ec1cd43c24b8f09_JaffaCakes118
Size
51KB
MD5
32768fb8a07accae8ec1cd43c24b8f09
SHA1
400df7f1d3f2d19ff0e307771c8e1799c3f05907
SHA256
03fe670432449d2a7be3ede7335ec29fef1e4b58fc9899331c7e2e36c8c6babf
SHA512
8b0e60e06d45d29c1151066b8ee2c198db92dd993cc9282c4a4c56a8ad3ea65d086dddcf8456468ca85246dcb19207d573cf8481042405ffad5a9c80c54196c3
SSDEEP
1536:1zExMwCGQ2j1zQsBrWVEEOu6fE746vSmn:1I+wCGvRzQsqEm6M9Z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
32768fb8a07accae8ec1cd43c24b8f09_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ