Outt
Sett
Behavioral task
behavioral1
Sample
393961bafbeb2b563c98c4ae1edc8982_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
393961bafbeb2b563c98c4ae1edc8982_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
393961bafbeb2b563c98c4ae1edc8982_JaffaCakes118
Size
52KB
MD5
393961bafbeb2b563c98c4ae1edc8982
SHA1
f9df137d3b61663b219541a6834dd71efe1868c7
SHA256
14d970a343215e90bb65d1c15322ce5914822e81d7cb4285eb416aecb146bc29
SHA512
3adfc1325beadb8a20062ba5e9f493647b56f87e01e725d3800e8ef79b732eac4ccf6f61ccc62ad20498784f3fde52ec679e9e65368792f61466383f7861082d
SSDEEP
768:wX7l2i4+6WhcbSiacfcW8nBS8/2Hpu02eQKmyyd0A76sdxX8BHwX9InN7J7TA8DQ:wXx6V9fH4r0IbyHYd1MQXK5tmgo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
393961bafbeb2b563c98c4ae1edc8982_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ