Outt
Sett
Behavioral task
behavioral1
Sample
40b1c722f279f50126387803843a92ef_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40b1c722f279f50126387803843a92ef_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40b1c722f279f50126387803843a92ef_JaffaCakes118
Size
65KB
MD5
40b1c722f279f50126387803843a92ef
SHA1
212bea4a117d752b1763605a83522fae066e1d85
SHA256
c1ba2590538d6df4097e556664548dae53c9d774d485dac00dac88afb19355d0
SHA512
a6a7c864ddf36627c6b97af5a85402d3c928075564b14fdaa1532762c965edeb026850ace9c404556165fadb6772bbaee93ae8c6460442f3a67c4e53309ae045
SSDEEP
1536:yl3E0TCfSkINqq0VJwyeapuMVl/XgrYIwSj0e6M:E39CSkPq0VJwyeapuM/FDSoBM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40b1c722f279f50126387803843a92ef_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ