Outt
Sett
Behavioral task
behavioral1
Sample
40c992a48ff80192238ee7c0ddd2d870_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40c992a48ff80192238ee7c0ddd2d870_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40c992a48ff80192238ee7c0ddd2d870_JaffaCakes118
Size
65KB
MD5
40c992a48ff80192238ee7c0ddd2d870
SHA1
4c31bfe4b9a2a92091204e83ca786fcee36d96d5
SHA256
1bed7ccd0ba6b99d7c79bc1e53a4cca3129177f846e4552610d5bde966039768
SHA512
40b6ee6de3c70c5fb01a429673ef21bb18fe01e75f9c447366607643bd6ab89d14354af15921a42efee3b778ca6c86479689cb0f9010781fd28314b31a63d584
SSDEEP
1536:uaqqcDHf5PEiOJuZen92OCyGdGK6lMpaHsMHgrH:ufqcDHBPuJuo8OnGdGK6lMgro
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40c992a48ff80192238ee7c0ddd2d870_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ