Outt
Sett
Behavioral task
behavioral1
Sample
375924fa11bde337f621d1c09b0340a7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
375924fa11bde337f621d1c09b0340a7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
375924fa11bde337f621d1c09b0340a7_JaffaCakes118
Size
63KB
MD5
375924fa11bde337f621d1c09b0340a7
SHA1
19087eb26436f2d3da5314d650f6b72bfac2a097
SHA256
b7bf4c5683e3ef0a45f144eee4b7eb178c878acf0cae802cc9e05716f6987cdf
SHA512
ac7177a40fe74260e79a4bb06fbbda18b78f2e604b29acd6339a60adb46e01be866aa3a0e39a5f1d173f918bde134dee6d1610a8152ba026b8fa30ffd269ccba
SSDEEP
768:h8WTpVT0X8zbps5HDpsL5Kq+zhOmVboVNVSXzv329w0nVU6iLl5HE093scXSPnTX:RVGHjNn0WSlU6iLPB8sS+pGJdnSO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
375924fa11bde337f621d1c09b0340a7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ