Outt
Sett
Behavioral task
behavioral1
Sample
481f5507c9afc62373d7811c5d836369_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
481f5507c9afc62373d7811c5d836369_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
481f5507c9afc62373d7811c5d836369_JaffaCakes118
Size
66KB
MD5
481f5507c9afc62373d7811c5d836369
SHA1
9049a47de64c487c4ed2bd137980dd82b4e6140c
SHA256
0ebf0c13ae91c08cab449eda1236fe42ac7cd66edcccfa8f84d9cb85127b3040
SHA512
8b72226c23d29bf2ce875a4d3df4d950428742eaa58d3801b867f92e43d67b5160cb4e414880cfa904cf89307f7363f27a2b1e2daab7da6708029ccf90a1d828
SSDEEP
768:GbvLDaaMact8TqS/fVoJBrjtMOuHQY+AQM564jP017DqHiVkbiVQ+o1L8i9YvP0V:ev2TNzuHQll2fj01fqHJeG+od8nUhL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
481f5507c9afc62373d7811c5d836369_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ