Outt
Sett
Behavioral task
behavioral1
Sample
493094883477250c7723654cceb90afb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
493094883477250c7723654cceb90afb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
493094883477250c7723654cceb90afb_JaffaCakes118
Size
90KB
MD5
493094883477250c7723654cceb90afb
SHA1
5904b2f0f4c6ee4975b5bb77adce52eab0856f57
SHA256
298b1c5374b136292dac48712a9b905307229449507a4a3c57763547b50ba67e
SHA512
e324574173ea98a5e15845dda7367456ad233de4cc732c33de34316d68af140d310fa7b79a08d6ddfcc9dc24dc61c4008aa4004507c1d73dcfc3d141f123a570
SSDEEP
1536:agF0eiyUcbtxiySMIXtCIaVJDdqQTkCxtJSvA1jjX0qY8OhReYZkFQFyI+OV:t2yFrpSMIdHuqhCB/aVZkFDOV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
493094883477250c7723654cceb90afb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ