Outt
Sett
Behavioral task
behavioral1
Sample
417a384255268fac7eeec430b58f18ea_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
417a384255268fac7eeec430b58f18ea_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
417a384255268fac7eeec430b58f18ea_JaffaCakes118
Size
60KB
MD5
417a384255268fac7eeec430b58f18ea
SHA1
163db8a24418d462800cca9da6787777e6dfa409
SHA256
350bc37596d802312073dcc7308769241bfe8694a87daada0109709d065c5c82
SHA512
d260c294db22b16b9d3b48b1f692c711ffb1e568e576df765a7a7a17dbcde7c2d50bdccbe761dc4505ffbc95566e8a43ddb94f26151a936363790124e75e9508
SSDEEP
1536:OBRVgrExucM5cB57ZQLpxtb270xZ+AgsUE1m9lph21Wp7Jdi:ERRsva7ZQLbtC4ZaQmJIEpldi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
417a384255268fac7eeec430b58f18ea_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ