Outt
Sett
Behavioral task
behavioral1
Sample
42278403af814121c27314f12a3eed78_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42278403af814121c27314f12a3eed78_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
42278403af814121c27314f12a3eed78_JaffaCakes118
Size
78KB
MD5
42278403af814121c27314f12a3eed78
SHA1
7b0dcf12c72ea23fedd751df669d9fa9a4a41c7d
SHA256
845b7bb41f5d66b7724f1b2cc280e8ad838be45523129a37aa81f7edd46b626c
SHA512
b54ff932efd08c64581b592e6bd52eb070303e4530efd33a2a900c2d9cb1eaddd3706b20320c8c4957151be1125828cb02517b5eb9c5a8c10e1a7ca37b554a16
SSDEEP
1536:5jRmO5aE4g+4O3A6nELy4sqY2HEdbHER1mSLoBqcNw5reYTCpd:xfQ7gNghEGUEd7EnmooUcNwV3TCpd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
42278403af814121c27314f12a3eed78_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ