Outt
Sett
Behavioral task
behavioral1
Sample
403a4ca40252e5945ed0c0835ff0cc01_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
403a4ca40252e5945ed0c0835ff0cc01_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
403a4ca40252e5945ed0c0835ff0cc01_JaffaCakes118
Size
50KB
MD5
403a4ca40252e5945ed0c0835ff0cc01
SHA1
ad524940268a3826e2385c11572079d28551a233
SHA256
6735d4389d3d5145a5d388e2b98ad879d46830700b40fd23b36be03c7f66297f
SHA512
a24aaeb1d006ba6c9544863ea68f88ae3dc513eecdab7d541d6caa198fb2e3cfec09d36afd58098d7682194977f75a0161e0a5ccd087d23bc01042100681f83c
SSDEEP
768:nbY4lSGqBHReBr98cbGbxN8kBiu7Y3b+L8oCdBhp4qRyR81aKDOhCS2FoOVfWGjz:EGS7HUYF97qS8oCdPpnZnqU9fS+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
403a4ca40252e5945ed0c0835ff0cc01_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ