Outt
Sett
Behavioral task
behavioral1
Sample
370ef8b47f3912d173b28931ec1dfd16_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
370ef8b47f3912d173b28931ec1dfd16_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
370ef8b47f3912d173b28931ec1dfd16_JaffaCakes118
Size
71KB
MD5
370ef8b47f3912d173b28931ec1dfd16
SHA1
21977af17ec7a3becd6bf4ad1766f2cd378b277f
SHA256
6a7e2d7e610e428a4cf9378941113409af5ad18c03736d9a6ba0639884546776
SHA512
5db440149bcc9c0213676f3a655b5076a576b72fb5b616e6d3a1678bdba97de36d7ceec755325c332b55edeeff2d71c95defd715ccaee6231f8ce34ef5b55005
SSDEEP
1536:evkua5OOfKU2jRQCNn+jY/HrvLVLnQ//+lTK/mhyfZITIWi:liU2jRQCN+kfrDVLnLxomh8Gri
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
370ef8b47f3912d173b28931ec1dfd16_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ