Outt
Sett
Behavioral task
behavioral1
Sample
43e6207312b25b9238a9e0829af41604_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43e6207312b25b9238a9e0829af41604_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43e6207312b25b9238a9e0829af41604_JaffaCakes118
Size
55KB
MD5
43e6207312b25b9238a9e0829af41604
SHA1
caeb50d046d2fbfe3d5c11a7bd60742f7b70b3a3
SHA256
283fee03e02c2926e6e215c7981bf78744d42b056e7d0a55037a7155ef37770d
SHA512
19efb3459be34614c2e45c4ee92f010ca1219dbceb1aeb454500ebdbc5066abc51f59e1034c5354fbece73f21605762edaafa80918022173ae7e7d9ea28f2e38
SSDEEP
768:nbY4lII8br6pHVmNzMc2MWo7/u06iljCmE3qXdkLp38Mb16sNBpVrm1gB2ib:EG37pwTD7/uf8jClaNwp38MboqpVR2ib
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43e6207312b25b9238a9e0829af41604_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ