Outt
Sett
Behavioral task
behavioral1
Sample
31f42050091497bb77341eb025ce7e91_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31f42050091497bb77341eb025ce7e91_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31f42050091497bb77341eb025ce7e91_JaffaCakes118
Size
64KB
MD5
31f42050091497bb77341eb025ce7e91
SHA1
03183b1577b381eb9036e66e0e16b4abc2485b24
SHA256
826193bb95ed0bfd7835d8213f84a39f70e3a9f4cb3a379110e7877178e91a5e
SHA512
a328ecc4be9d683d78753512aa82ea1731124f1c17ac0dc222c5abaf558b7296faeca57e2278f879478867033813a0cedf2b38959a89c0ebc7fe7bee20366343
SSDEEP
1536:1zExMwCGQ2j4nh90ecUESSkueycqcZgpYBehMB4lHaYTI6PY:1I+wCGv8nojnknycqcdBeNl6QIsY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
31f42050091497bb77341eb025ce7e91_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ