Outt
Sett
Behavioral task
behavioral1
Sample
38f4635ef637bed7692ec9138c44a370_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38f4635ef637bed7692ec9138c44a370_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
38f4635ef637bed7692ec9138c44a370_JaffaCakes118
Size
70KB
MD5
38f4635ef637bed7692ec9138c44a370
SHA1
baa9d6c538794c78e6bcbc637513607218cd1e7b
SHA256
21f8d5f10b312a05e8cb38cbff89165640dd3799ffd89a0d7460d9ed6df0acd3
SHA512
a43f0e6c6e1967386476ac74d8c273a03b8266395a9e5d0aae3b7fee18d7a6df20bedf1bf136140058317ff578641650e8919941d289f430dcf055354a38baae
SSDEEP
1536:5jRmO6Xb/HyijsyxtEI4s9hhB/yBhBsz6b0Li8qV:xfW/Hy6saMO5atszO0L/2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38f4635ef637bed7692ec9138c44a370_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ