Outt
Sett
Behavioral task
behavioral1
Sample
383c7bda6b295f640bfe7d891b376567_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
383c7bda6b295f640bfe7d891b376567_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
383c7bda6b295f640bfe7d891b376567_JaffaCakes118
Size
60KB
MD5
383c7bda6b295f640bfe7d891b376567
SHA1
e157b352568fec38741cc0867f4bfd1415fbe826
SHA256
416687e7128cc23e04df9cafeae1ee79ee142aa38a4a8d5f2fda5a8ce78963f9
SHA512
d0d48ae94c8fdf4e0b45e068d28c514e2a4c83eed8e23087e7fd28a319ede4163d8d996de2b163eb388257522155d3e081a7f395847bbc2f8e21de54b77bae46
SSDEEP
1536:EGtKJSMlqC+gD3ZOt9v2qnxlBXQtVhVyYQ6sMW:EGwwtEanP1QXmlMW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
383c7bda6b295f640bfe7d891b376567_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ