Outt
Sett
Behavioral task
behavioral1
Sample
352cf980fbf32dca5aa32ccee0b0911a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
352cf980fbf32dca5aa32ccee0b0911a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
352cf980fbf32dca5aa32ccee0b0911a_JaffaCakes118
Size
50KB
MD5
352cf980fbf32dca5aa32ccee0b0911a
SHA1
089e1a6b09cc0267ba658a0f70b0fd20693f65a4
SHA256
13660e7760073eb3f1ba722edb6def6c9a31be9e04d03c7af7e41062f0851c7f
SHA512
af650d6d3c0c16c53a127f4d0c91350540c908787a3a34a820ba2f1b956dbcce7cbb8e3bee7bf0c5064bf8e28fc2925cfacfd23272763a54e8adaa8e52ea0d01
SSDEEP
768:nbY4lUg+Pu5+wjoZyPILOFU+2VRcbAd02fhoXYgk6/S0x:EGt+W5/oZygLO2+2cbAphoXmd0x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
352cf980fbf32dca5aa32ccee0b0911a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ