Outt
Sett
Behavioral task
behavioral1
Sample
30517a65965a0f6448b25814f728e4c4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30517a65965a0f6448b25814f728e4c4_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
30517a65965a0f6448b25814f728e4c4_JaffaCakes118
Size
65KB
MD5
30517a65965a0f6448b25814f728e4c4
SHA1
811591dacf8cd9e636ee184de8549ce7e81707ed
SHA256
b8e5f14bfafe90f2713fe6007e2e4714d766ba7e52569e73fadf9a7c533419a8
SHA512
add7db2eb9e05fac3127ca09f50dc7b558199c6f55f9fad38e43f306d481ddc547acb08f86b543ed8131df182a86278c9414c05bd6d9e70cce7946df9ceb52e4
SSDEEP
1536:n7ZLNPp9pZBMsmG7fLr+2195Cw0QEJmM+jBPo6qklTmovpX+D:7ZppfVPPUxQ+mM+jBPo67lTnpuD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
30517a65965a0f6448b25814f728e4c4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ