Outt
Sett
Behavioral task
behavioral1
Sample
451e666c5425afecee01c7495701bfb4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
451e666c5425afecee01c7495701bfb4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
451e666c5425afecee01c7495701bfb4_JaffaCakes118
Size
59KB
MD5
451e666c5425afecee01c7495701bfb4
SHA1
ecf2f05684a6faae43cb008a0991b251db2f0192
SHA256
a130e9592ee330b5c13bdad16eb5fb0a28efb190d43b3a7992256a490580c36a
SHA512
140c3a89d6ab09d052fc3489c87a17fb9af6f597b16df2c9ca3549ee110e65f5aa074faa81c7fe32a999be1c2dd3ccebf3d1d5f831d302d20ba637734eea11cc
SSDEEP
1536:V8O9Nn6Rjri8y5dWt1xUFKfr3oaT/sFfPokiJ1IJbE9qLYGoU:2Oz6VW8y2tjKKf37VkiJGJbE9wYGoU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
451e666c5425afecee01c7495701bfb4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ