Outt
Sett
Behavioral task
behavioral1
Sample
638277d4db56e8d45138e2ba621b89d2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
638277d4db56e8d45138e2ba621b89d2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
638277d4db56e8d45138e2ba621b89d2_JaffaCakes118
Size
75KB
MD5
638277d4db56e8d45138e2ba621b89d2
SHA1
7fc832d9fe9d74898ab3d201ffd94ccb9dd00eb4
SHA256
3ff59d7a03c1722c6c304cf7d0fc286b860169ba07c3c99dbf6bac05d8d0413d
SHA512
cc91e44417c2cc0fa63600a2c4c00542a4871673a3fae2b9974031dd3d6e072445aa605c2809b111c1a03b7bffb0c9459f86c7395315ca0189f612adb6571cb9
SSDEEP
1536:1zExMwCGQ2jFTbRofqLxJg0JKA6xXs0UaSeG+guwc6:1I+wCGvRm+200Z9Nkj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
638277d4db56e8d45138e2ba621b89d2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ