Outt
Sett
Behavioral task
behavioral1
Sample
371c3ad6420062127845395495646030_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
371c3ad6420062127845395495646030_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
371c3ad6420062127845395495646030_JaffaCakes118
Size
62KB
MD5
371c3ad6420062127845395495646030
SHA1
b26be6fddcb5498c89a8b0a9969e91e08a916a76
SHA256
91946e033e0c99a4a7a9a9e9ccc324075cab9bae39ca5605b0cdd670e70037c4
SHA512
231750fc4ed0926742124ff1fd31764766e5ebbbb079a068592b01ec2f92c6af4e6956854c00a74bb0ca07121d4d172265fe69cdc9f21f42e0a0ccbe42927b0c
SSDEEP
768:9xBtKtqyLUFUj8Xiz0O0eG9hyzWvPr64uB/M2pViOT/BvX1PzWxaiWE4J5YQaXEz:9QXSPhycPu4utPDvX17WjnJVEz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
371c3ad6420062127845395495646030_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ