Outt
Sett
Behavioral task
behavioral1
Sample
47af49167b5c7cb6475739e19edb7085_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47af49167b5c7cb6475739e19edb7085_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
47af49167b5c7cb6475739e19edb7085_JaffaCakes118
Size
65KB
MD5
47af49167b5c7cb6475739e19edb7085
SHA1
ca436924050899bc617d39179e905e23dff4defe
SHA256
1de695467a4f076fa069a3d7a222ee7114662ff578c2339cba8ee629e7b8107f
SHA512
25c8476888b6dbab833357298b0761ce672510149a0cf1c6305fa428d74179db9680d1c96581660d5e09cfe3127286beecef163f4010d1da0c0902af9c66437f
SSDEEP
1536:mPO6KEVbsVP0g89aEyGJ2RvFW7kpsGIB4weN4mb50NJuf/hAO:cMEVbsVcZ0R4MXsGIXTRJSpAO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
47af49167b5c7cb6475739e19edb7085_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ