Outt
Sett
Behavioral task
behavioral1
Sample
39ead5e27cf14bd4e9264554838d462d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39ead5e27cf14bd4e9264554838d462d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39ead5e27cf14bd4e9264554838d462d_JaffaCakes118
Size
46KB
MD5
39ead5e27cf14bd4e9264554838d462d
SHA1
6365cbb06577f19e26d3328fd00d8747d066329d
SHA256
146e9a17b521ccc660c5ff5527cafc87860e810e4938b8f8ed11b8b20375ac23
SHA512
8873e536011bfec9f8ccba53689d97ccf3d5afb29aedc558443935aed9daa07053f8e7f133f895dafdbe51ddccb699fd0b35b00b4d5c37b9b1ad5dde1ada8e27
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTIEZBqPiSFYxWRYU/rM8JHldxN0ANyTvy4jOwPFqLV:mPO6KEVbsVP0gFXxIYwRYUDZl1pyjyIA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39ead5e27cf14bd4e9264554838d462d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ