Outt
Sett
Behavioral task
behavioral1
Sample
40a9200d7f60be24934c1ee42fd97aa1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40a9200d7f60be24934c1ee42fd97aa1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
40a9200d7f60be24934c1ee42fd97aa1_JaffaCakes118
Size
75KB
MD5
40a9200d7f60be24934c1ee42fd97aa1
SHA1
68d0f519748bf507a5fc54912ceb3e98d383ce94
SHA256
2aef1d72ce41c573076064d32d0b73fa095e7bf4d1ef770690138fce337f782c
SHA512
7d035d8d89a394c3446d5b3de3da7a3d6b7ec9a964efdf621ddc28d202a6569f678cb047168d1600018b1b206dcd72192e6126f937a9dc85afe1a05730a9a27b
SSDEEP
1536:MhBRVgrExucMgbM8t1/9/pjLlBninvbmViu:cRRsgM8t1V/pjLbivbmF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40a9200d7f60be24934c1ee42fd97aa1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ