Outt
Sett
Behavioral task
behavioral1
Sample
462d70ef6edf59b826a570c2475b525f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
462d70ef6edf59b826a570c2475b525f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
462d70ef6edf59b826a570c2475b525f_JaffaCakes118
Size
69KB
MD5
462d70ef6edf59b826a570c2475b525f
SHA1
30e91af5b249423e22f3986c74eb46a705690307
SHA256
1a61f6a9ec226bcd823a4943a23a848c6ffb6cd8d0129d82937787fb6440bec9
SHA512
76581bc31780af6f5da40dc935508c575e11ccdc05bde0da7d7a6118629365e00b91910bc4828026d99a6bc78cbc01826e2f0a467ba287a3805cc608cc5d288c
SSDEEP
1536:1zExMwCGQ2j5q3TE6s2lUMbdccgwIA9AsUGHbnYn+Ln:1I+wCGvao70XccgwxAsUG77n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
462d70ef6edf59b826a570c2475b525f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ