Outt
Sett
Behavioral task
behavioral1
Sample
317360ce29752c9ab508032caec42a21_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
317360ce29752c9ab508032caec42a21_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
317360ce29752c9ab508032caec42a21_JaffaCakes118
Size
46KB
MD5
317360ce29752c9ab508032caec42a21
SHA1
bad878bddd075d3d2f3653165d6616ab79d42714
SHA256
4402b82050f5c6084e0ad4094b35a72504f71bdda916664443c9f1e939e31dd9
SHA512
e6878002048c24871791127b81cf7bd96317f3354294738b3c419a0dfde84b5d5e72f363bd121a0b2a6ef1ff08c4ea463f9b341aa19db8d4aa68f264eeb84210
SSDEEP
768:56IRmOOuHsVXHO9MVYhvxzueKb/5dAEyUrLBjQrQD5d25wlmCGzrkguaGu1/8i:5jRmO8qMqh5ud5SWu06ilOEi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
317360ce29752c9ab508032caec42a21_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ