Outt
Sett
Behavioral task
behavioral1
Sample
45627b3d76c414567927f85b078add99_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45627b3d76c414567927f85b078add99_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45627b3d76c414567927f85b078add99_JaffaCakes118
Size
58KB
MD5
45627b3d76c414567927f85b078add99
SHA1
54f974fac24411fda40dc515a0bc7a57727bc4ea
SHA256
b9a6c8ffaa02b2813468bdeab2439389a001d84c08b20dec55f1da5f5b201027
SHA512
1089e3958c5784d5ffad8791b347e63ee3dc3a011d7b8c7687a1efc5957b2143f2e79541ced718aadf22620ba925ff678fb5ef5d0ed7c8f1e44fa7c915f8f0da
SSDEEP
768:KsZIlOe1SCkLOk+ZWXkAWdP58wDV8G1+cO7GJqOxv8Qv2olOvN8tjgjNSzG74D6q:jZIcCxRX5JqsWG8UTxjjw48+fWO9vX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45627b3d76c414567927f85b078add99_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ