Outt
Sett
Behavioral task
behavioral1
Sample
304892f29d882af1c657d2b6a04bfbc8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
304892f29d882af1c657d2b6a04bfbc8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
304892f29d882af1c657d2b6a04bfbc8_JaffaCakes118
Size
73KB
MD5
304892f29d882af1c657d2b6a04bfbc8
SHA1
e36d141a3a28f2b8cadc8d62f9beaa5603e30783
SHA256
1500a02ce5ccd9404076ac24ddea43ddba36b52ad059bc4206ca6da78ba96c6f
SHA512
835c30650c2538f1049f12ea31a6cd0185ffa7091fe712d71b29080dcf6707128be0522de206c0f714a680b4ceecfe7a7556e856a0c65847b458cf7b4b729be0
SSDEEP
1536:yl3E0Tks1kuNICXW8pzKH2X5kaJKQvHkYVIzBvQ8DE:E39N18UWozLE8zIzB4QE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
304892f29d882af1c657d2b6a04bfbc8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ