Outt
Sett
Behavioral task
behavioral1
Sample
43a9621f760e107fae46a71e6a32c7d2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43a9621f760e107fae46a71e6a32c7d2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43a9621f760e107fae46a71e6a32c7d2_JaffaCakes118
Size
51KB
MD5
43a9621f760e107fae46a71e6a32c7d2
SHA1
91625ab35604aa1a14ce3d25d7569f74ffc44040
SHA256
16e5a30db3250c3bfae0eaf5a5d7fbc5e607161f6f5c38b59018e1c8673b3e4c
SHA512
5b4de9704a6ee6716000dcb0f262fe6e298923592e6246b063f1f670c3191223de7836c39949dd0752a82831bd349fce1fd1702bc8147fda80ce423f6e3eeb03
SSDEEP
768:nbY4l/WcIyVYDQeG5boZTX63JFzAmR3PFYzdNsoNNbRuiUw5z3rz:EGayVTbWa3y8CRD5z3rz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43a9621f760e107fae46a71e6a32c7d2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ