Outt
Sett
Behavioral task
behavioral1
Sample
32d36fbf347a7b8e33d7bf26c55f2397_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
32d36fbf347a7b8e33d7bf26c55f2397_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32d36fbf347a7b8e33d7bf26c55f2397_JaffaCakes118
Size
52KB
MD5
32d36fbf347a7b8e33d7bf26c55f2397
SHA1
bea65f2c790f5cd7e380d61a1e9e8ab8917b7dba
SHA256
b2d11493690a3e56453fdfaf7e90987a68719b3bece107270c9a4af36e27cbb2
SHA512
27f4357d2391ae543a2846b91f899759b82a9faf47e0dcc66c96392ac6a49fcab64a663a8756167812a123c3a47ef7ef4370c88faf38f910dad9eda5a846becd
SSDEEP
768:9xBtKtqyLUcmGtKGBWt5Jda3R8c33GVXWFUcGbnzdW+2I5MuHMZH8FfTyKHUa:9+KG6Jd4t3GVXWkBgI5AcFfL0a
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
32d36fbf347a7b8e33d7bf26c55f2397_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ