Outt
Sett
Behavioral task
behavioral1
Sample
494982cf9884f682a91088937ca4689c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
494982cf9884f682a91088937ca4689c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
494982cf9884f682a91088937ca4689c_JaffaCakes118
Size
55KB
MD5
494982cf9884f682a91088937ca4689c
SHA1
81fe45df4e2f98759ef33b139d613ea591ac4954
SHA256
194a4e8fe1cf4a3850a2f188c2522cb47631ea8296d7f9b9204e62e83ee83e37
SHA512
c32a852b9873c597b739b4da2479d6d0e8fa7bc6c263f958b51226cc1f9d37283a56f87e7954d817083d6cbbbddd7df2fb5698a864743341c440b6dc717190a5
SSDEEP
768:26cTcjNp0oMrTo/Wxf3zJCuWpfM6cnTjRPZ8NBqycDJC50H36a/G4yoa3u67trZf:23umoMtxLJCuWxJWRPWNwVT/R83J9z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
494982cf9884f682a91088937ca4689c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ