Outt
Sett
Behavioral task
behavioral1
Sample
403a68c52f4fab808248dd5e2a39789a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
403a68c52f4fab808248dd5e2a39789a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
403a68c52f4fab808248dd5e2a39789a_JaffaCakes118
Size
62KB
MD5
403a68c52f4fab808248dd5e2a39789a
SHA1
fab812ea332e69a3cd6ae8b2c4bb866ab3e8fec9
SHA256
56f0340cfad216fcab9f362194ea9be6d8459bdb3ea391914a3af73f583c2d48
SHA512
2b8a83897dc2b8e9ba737c8639ba9329d355a9b1e4c09ac57e2bffb3e6d3664231296d6a225dd169867af69ce620d36d7ff6a235fbd4a1ee0590f8c47db5c6f3
SSDEEP
1536:V2bZJH6pV276+Z5tVwJk3C3/qWvGgfARnALA+pMOTPIoBf:WZcU++Z5tVwJkS2RALA+myHBf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
403a68c52f4fab808248dd5e2a39789a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ