Outt
Sett
Behavioral task
behavioral1
Sample
32a0aefbda7484f35a8c5d584090b2bb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32a0aefbda7484f35a8c5d584090b2bb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32a0aefbda7484f35a8c5d584090b2bb_JaffaCakes118
Size
66KB
MD5
32a0aefbda7484f35a8c5d584090b2bb
SHA1
1e2dfbbaa9c3575979b82ffa842d6d654b904948
SHA256
13c5b3ed78ee22c9586508c7f8a097dadbf7e0ad2e947fede9b35f5edcd5d478
SHA512
6b2644cf91e53b93a32f26bd26f6447de1a16faa1cad93bb99a15692166e3c7ff802bd34f3a58179ea144766e6c36f5348e653f71ef7f5cfab685ddb5dfef441
SSDEEP
1536:mPO6KEVbsVP0g5LOJ38KaRyyWz19vsMkWGclRqfOV81nXBe74S0EoE:cMEVbsVcWLOJ38DvWz1u1WGKCOSI74S/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
32a0aefbda7484f35a8c5d584090b2bb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ