Outt
Sett
Behavioral task
behavioral1
Sample
356e4ba673fc235961df9b602383f442_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
356e4ba673fc235961df9b602383f442_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
356e4ba673fc235961df9b602383f442_JaffaCakes118
Size
78KB
MD5
356e4ba673fc235961df9b602383f442
SHA1
21d11121928451f641542d5aebe63b24049e72f8
SHA256
48577355a5cdf1d659664517ced16fcb4ca8704190509a6d6a9c5a87948c81b3
SHA512
2fff315cdc53ec14e3f005954b67280834a1996b16dcc8aff0834f213f2a791479b00ef35324da3f197686c62335b37198fae15680d858481e6f52f7c11d7649
SSDEEP
1536:1zExMwCGQ2jEkMZvAhDhP3ISyyRgNMRy5yRB9NdfQ0uqkb8+:1I+wCGvjMoDhP4SyyRgeBT9XQ0o8+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
356e4ba673fc235961df9b602383f442_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ