Outt
Sett
Behavioral task
behavioral1
Sample
452029f3073a14b29de20c395aa98324_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
452029f3073a14b29de20c395aa98324_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
452029f3073a14b29de20c395aa98324_JaffaCakes118
Size
63KB
MD5
452029f3073a14b29de20c395aa98324
SHA1
cd3e651a09ed2e9904b5295cbebf34fbe799bdc4
SHA256
31c264845cb5ab9c56b411a07e7aa3c3242c91063c4b1463fcbe2e6e5be59e12
SHA512
803cc451986470b68b44bf6231ef2783c0f47cc5c727ad83b6999bbf10b609829d4be6d94ded641d690991471c64658ff16473ce474d8424ee59517d0aeec8ef
SSDEEP
1536:Bm1NGJVGajNM5MwrodMzxomXu7fU/IOLbv3sz+Dib5:kX0Vj5w8zc/IOLL8M2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
452029f3073a14b29de20c395aa98324_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ