Outt
Sett
Behavioral task
behavioral1
Sample
43704ab6d78b67b1ab39ac1900aa2beb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43704ab6d78b67b1ab39ac1900aa2beb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43704ab6d78b67b1ab39ac1900aa2beb_JaffaCakes118
Size
62KB
MD5
43704ab6d78b67b1ab39ac1900aa2beb
SHA1
9adc48fa62d0d8d24240388bead29ab46e6a4e3f
SHA256
a69caf6ff811c63c673a45f680390157e92a11caa8113d6b15d49db1e76ec441
SHA512
ba33852254a1ef8a98b5ebd04efd24bed120d784bdf62e01048aa51c7a8ae3dc6b7c411cb07475195d90a93082f978006af325af222141ccc7faba1e6fc13260
SSDEEP
768:GbvLDaaMact8TqSMD3oEEfx2IV5x528N0zh+EezvnTYUyGITidVv8uf9V4JJipts:evOlHLak8NCezP8LDuXv8i4rccG+L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43704ab6d78b67b1ab39ac1900aa2beb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ