Outt
Sett
Behavioral task
behavioral1
Sample
32e4d1e763ab016fc389516a4b6c35c5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32e4d1e763ab016fc389516a4b6c35c5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
32e4d1e763ab016fc389516a4b6c35c5_JaffaCakes118
Size
48KB
MD5
32e4d1e763ab016fc389516a4b6c35c5
SHA1
42c7f57fd8edfbc9b45335ae02344ad21003e7f4
SHA256
14dc58eb6c02da97625e571fe3e4da1affbf644f16721e5bfabf3d7bfc056e38
SHA512
cd36f2dfb3c440f284714b6646d4f991edc873aebd8892ab4e3cccfc2695f5f86ea3b8b3b644af38f3c5810a8bd0afc596563555bb6bf8c4e96bd5b31d348ac8
SSDEEP
768:n7S7ILNPpMSqUCA+AJBMJQ+M0dP2x8zAZcF/UuYQ4ivnKQlueBZtP1aV+x0FAmr:n7ZLNPp9pZBMG0dP2xvcaaQelP1TeJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
32e4d1e763ab016fc389516a4b6c35c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ