Outt
Sett
Behavioral task
behavioral1
Sample
42665d21da78fad9a64f6c340be4d234_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
42665d21da78fad9a64f6c340be4d234_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
42665d21da78fad9a64f6c340be4d234_JaffaCakes118
Size
66KB
MD5
42665d21da78fad9a64f6c340be4d234
SHA1
a241ea4c7b44bc784ef8e59ae9ab404042b83aa9
SHA256
96859eea40de045e97e1a15b27d11826954cebd321f680aaf9c828a5935b8f60
SHA512
c0473d51bb3d90526e27eeeeeb168873a5a2a6eb4636b2f9ff83b74042efecf2ca54cd10cb647a9193fabef45c01ff8237310637dd2d0238e91869a1f6ff437d
SSDEEP
1536:RV8JTimpYl1AQ+J11vqy1IL3GiZ9m+zcwGP15xJ:Tx2u1AlJDqcIL3vZU/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
42665d21da78fad9a64f6c340be4d234_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ