Outt
Sett
Behavioral task
behavioral1
Sample
41b38fc259acec3035c8bcb1cb5c842b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41b38fc259acec3035c8bcb1cb5c842b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41b38fc259acec3035c8bcb1cb5c842b_JaffaCakes118
Size
68KB
MD5
41b38fc259acec3035c8bcb1cb5c842b
SHA1
6a750eecbe6b6fdd9e54fb318e2cd7d4ec3b2a9e
SHA256
3b6cb2400b74291d250393a3a5da19cf7bd3ac8eed5dc85387bfb7f54c429c24
SHA512
9657ac737fd53ca75b48b10d8c85b093b15197512ed5a8a75b1e442242c34bd5d49bb6aa9edff0636e2b01497db817f958d27c27460c58f88a07958e4d3ae48f
SSDEEP
1536:jZIcCxRLiHAPKCYttP2ED1XyAGJl1eDlg8+UFUPrmz:x+RigPBGP2U9yA0In+UX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41b38fc259acec3035c8bcb1cb5c842b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ