Outt
Sett
Behavioral task
behavioral1
Sample
361d425fe25157ece9fc995650276084_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
361d425fe25157ece9fc995650276084_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
361d425fe25157ece9fc995650276084_JaffaCakes118
Size
57KB
MD5
361d425fe25157ece9fc995650276084
SHA1
599404870d69d636639ee1ae3e285ac982169c9e
SHA256
492a00da0c543a48ef6dc6c85ff051acb4053db921eb57b7a6267938eb22795a
SHA512
5c2fa30e0cbfcfdfe7b13cf5108cd44abdd2183708253b5350e9d7a9a911d7839c440da21212085b44de6c9f2b9fd43f1e98562a3cb4ee9c689e447bd9604fd6
SSDEEP
1536:V2bTzZd2TiwKEo5sMKvLiD5yXvhGndPe9WGqr5499epzPR/1:WTzZUTRKEOELYy/YncQs0pTR/1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
361d425fe25157ece9fc995650276084_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ