Outt
Sett
Behavioral task
behavioral1
Sample
40e6b6bef2ac4cbd1599f7587c89f594_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40e6b6bef2ac4cbd1599f7587c89f594_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40e6b6bef2ac4cbd1599f7587c89f594_JaffaCakes118
Size
71KB
MD5
40e6b6bef2ac4cbd1599f7587c89f594
SHA1
f47f2d9105d2b3a29741904008cac6334deb6edd
SHA256
23f580d986bf71c6ecf423faf976c5701b44687c0c7d16805adb0a113dd64ef4
SHA512
434831473c2ed0bc103c97c32c8dd6a1035bcf6ec3ccc6732d9b13c1304eff32c6d7070b149928487fdd248434321ce1c6ce5e5d72f801050aaf58f9c0ca6035
SSDEEP
1536:MhBRVgrExucM19lY3pmRO4dwsoVguIGbbOllQQDGeyxvIQ2o8Olgqf:cRRsnY3p4O56hGbalOQqBxP2TOlgqf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40e6b6bef2ac4cbd1599f7587c89f594_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ