Outt
Sett
Behavioral task
behavioral1
Sample
39887c402803260bad14e5b8b80796c5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39887c402803260bad14e5b8b80796c5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39887c402803260bad14e5b8b80796c5_JaffaCakes118
Size
59KB
MD5
39887c402803260bad14e5b8b80796c5
SHA1
04b73bfde4eebebc1caebfecb957171b96f88b67
SHA256
6d801a202c493cf2ec48f9a121783720b55599bdcbe815a0054a6008b215e0fe
SHA512
4d77a86f4e26a4b25bb5bbbd27faf66afa328e6019e7d0cd307153f7186949a1af6f13296f1e918407352d0e625b1f84743031a91d50b9b49e7efbd2c8e28336
SSDEEP
1536:yl3E0Tjg6EBOU0wF+VWmUf/25S+tGKhHnecFVx7pzS:E39XMYRJU25S+t/Ze6VVJS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39887c402803260bad14e5b8b80796c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ