Outt
Sett
Behavioral task
behavioral1
Sample
315a8ef3a3ec02cd0b1ce634c94dffaf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
315a8ef3a3ec02cd0b1ce634c94dffaf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
315a8ef3a3ec02cd0b1ce634c94dffaf_JaffaCakes118
Size
52KB
MD5
315a8ef3a3ec02cd0b1ce634c94dffaf
SHA1
11f16a53a2dec3ff1e4a9aade90a82b3bf421893
SHA256
635a293ca72904d709df4c4e2ce192979129205a2ef37974b8dc173480983a10
SHA512
b6889b25703f17bdc31ef7d12d8c70509cbdb6d26da412bffa09d1a133bb4b69c78db22d8bba4d810e085c3fb267d70669f1f240d617ddafc939b040979dadaa
SSDEEP
1536:mPO6KEVbsVP0gvuZSxlK69O4RW0UxcK0iY+eTbqulYcY4m:cMEVbsVcaPDkH0UxcK0i0TbtlYh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
315a8ef3a3ec02cd0b1ce634c94dffaf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ