Outt
Sett
Behavioral task
behavioral1
Sample
345a4185e0d0a5c12f9cb9ced8689812_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
345a4185e0d0a5c12f9cb9ced8689812_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
345a4185e0d0a5c12f9cb9ced8689812_JaffaCakes118
Size
65KB
MD5
345a4185e0d0a5c12f9cb9ced8689812
SHA1
142576ce0bfdee74c0ca4d2e1d138e0c4563525d
SHA256
be8319d476cd0d491b3396294db403d9193ddb091488802b3465b08ba6bd4391
SHA512
41eed016cfe225e9077fbb7ef5771b88576db11065e966f1ae1a242883fc33a5bf1f05dfcb381d4431acd0d09831869f3b6e390aa1141b9259f7e62b9123de4b
SSDEEP
1536:9Gtehzp2utj4kVjnYwl41LP+fPR7QD89M7KD:kAhl314kBY31LPeJM8/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
345a4185e0d0a5c12f9cb9ced8689812_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ