Outt
Sett
Behavioral task
behavioral1
Sample
43bb037e13b33892e10c0f30255c886c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43bb037e13b33892e10c0f30255c886c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43bb037e13b33892e10c0f30255c886c_JaffaCakes118
Size
67KB
MD5
43bb037e13b33892e10c0f30255c886c
SHA1
7aa2b6cc3e6b102f33223bf27da1efa83f2af4b1
SHA256
42324da005524b1bcf195a7109d8a0240c1f6605bf5328d60ff42e0aacdc8dea
SHA512
f63c3476388adca8447c7e410cb0d528df266e62d7d350957ec3d36786922246dea58b3998fc911b6f64758830f8410719f783275655f77b645283a6f8e85888
SSDEEP
1536:yl3E0Tf9/Dgzah5j9l0uhMdXLo7geFcxoeNR/f6dJZ:E39j9/DE6suhMleFQN5fqv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43bb037e13b33892e10c0f30255c886c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ