Outt
Sett
Behavioral task
behavioral1
Sample
312a95bb98a9be261f980ea3cfb74722_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
312a95bb98a9be261f980ea3cfb74722_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
312a95bb98a9be261f980ea3cfb74722_JaffaCakes118
Size
56KB
MD5
312a95bb98a9be261f980ea3cfb74722
SHA1
4a813dd3e6160f717f1fa65799082543f53c923a
SHA256
30abf6b219187ebfef8061f04d18511e3fb748f49542b94ec3b9033953ce95ad
SHA512
662045f36199a45c0cc6c54a20e24d8fa445846d1a4e548394ea55cdfcb137700322d7ed8cb3944f68356ac9ccb3af4acbe377ad5821b91a1d1e6e5bf1f29660
SSDEEP
768:z3OHS8KOzrx77p4bkbktWiToRDS83AnDCb+eJ/2v8blsT/kSXoWKP1I4:yHZohwQDCSeJ/2v88sSYdI4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
312a95bb98a9be261f980ea3cfb74722_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ