Outt
Sett
Behavioral task
behavioral1
Sample
39b680d42e609ed2b0114707bdb889a5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39b680d42e609ed2b0114707bdb889a5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39b680d42e609ed2b0114707bdb889a5_JaffaCakes118
Size
65KB
MD5
39b680d42e609ed2b0114707bdb889a5
SHA1
6c8b8052e93f7f9c4ddc0eac7a169b6bf5c4d977
SHA256
7345fcbefd7077fc016beb5441bf5ad6e303015cc04900644ffb424b28492015
SHA512
86e3bc0376cd8f9a8c75abda51f6facd332e04a22622bee1d20d9c83eb31b3fc089c93bc61dcac0802912b1de949d733e0808ee31f01daa97636a08c1fe35a91
SSDEEP
1536:RVRvfmjYmVcHoqP493GSUgdJsrNwbIP2CRTprMEeV0ryHW:TBfQVcI19BUgzsrebxcNrnUYyHW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39b680d42e609ed2b0114707bdb889a5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ