Outt
Sett
Behavioral task
behavioral1
Sample
380350a164c15c805ff998badaf54e38_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
380350a164c15c805ff998badaf54e38_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
380350a164c15c805ff998badaf54e38_JaffaCakes118
Size
59KB
MD5
380350a164c15c805ff998badaf54e38
SHA1
d498f19142fcc2e0c70c72ee1f1039d1683e87c7
SHA256
1db21c4c7a18b411875b1e97fa7d32895e973dfda599ae20965769c0c314e2c3
SHA512
28a48481eae7a60176e153b75ef1a660ed79039408851c8cd77eaa54148ae241e9d5d3d947b8eee0fb3b8ce0fe890a8fa2d85f13397ef9384ba63edd20a25022
SSDEEP
1536:APqmOCbgFl8LJeLQQT09wTGNVxHw+ZZ+AqP+Tdv:cqmAFOeQQI9BfZZ+buv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
380350a164c15c805ff998badaf54e38_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ