Outt
Sett
Behavioral task
behavioral1
Sample
38184058d67d17eed7e85cd30174f701_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38184058d67d17eed7e85cd30174f701_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38184058d67d17eed7e85cd30174f701_JaffaCakes118
Size
60KB
MD5
38184058d67d17eed7e85cd30174f701
SHA1
4280834ccfe1a9cf37ad8e485b5bafcf98609d88
SHA256
08b15ed2276aed0d31a76058d522e6fbaf40d691763e7a87aba00d24e3ef5318
SHA512
df73032b9d92b6cd882d4127c7260f12f223a07212dcbab053f50bcc0e02a0abd99e13628c525cc5a07b7899466ab9db5282d5be7b434d582d8033df6ba0e94a
SSDEEP
768:Gx4m7JNSll3dTG+BPO7he9BHgfp9L4YzP/bLVg0hqPqc9MX7CvivYFjbDYCji:Bm1NGJVGfeBYznbLOxJGLqivYNoQi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38184058d67d17eed7e85cd30174f701_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ