Outt
Sett
Behavioral task
behavioral1
Sample
428de072597bd8d7c413177572766561_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
428de072597bd8d7c413177572766561_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
428de072597bd8d7c413177572766561_JaffaCakes118
Size
77KB
MD5
428de072597bd8d7c413177572766561
SHA1
3dbfc413f5cc32a5278f862e6d51322e90d37a72
SHA256
7a088d6b2ca83833d7e1a490ac469300e07a3e5d1fbef553a6d31d3c67a41d96
SHA512
51e739756a085731dfc6105c24535a25e249357cf7700c3eae27a9c0d87778840db2c852669e0fcbd6a838a9ab9259007ebdef582a32192993e5980d1c963132
SSDEEP
1536:agF0eiyUcbfN0W2OTQ5BAlYGJFArVFs/ZPnl1BByHycqXdGM9:t2yFBmSQ5OYGJFoVFs/ZPl1PJcqMM9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
428de072597bd8d7c413177572766561_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ