Outt
Sett
Behavioral task
behavioral1
Sample
673a17f194aab778aa04c8cf0169171b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
673a17f194aab778aa04c8cf0169171b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
673a17f194aab778aa04c8cf0169171b_JaffaCakes118
Size
52KB
MD5
673a17f194aab778aa04c8cf0169171b
SHA1
27d8629a6846a210d5ba0b6277114b49075545b5
SHA256
746d0d2a4da3a03bb4dfd131123b925443281d7c9d48aaf9577cfac40dcbfb5c
SHA512
0dd324c0ba5f0f3e2cefd8cae0faec5c0e4a27c19684a2ce4bb9112e3a4239e9569d75aa5633d144b3d2541242c92eed3c5ae165e0104a67c83fd2325d7c099e
SSDEEP
768:hM1opOjOOfwvzESMaSR/U/F/EZYsBZp4b07+0adHkOPuC3BuEeL+BrndxxmUgm:anRdDdlU/xE+E74AKFbmC3BgLeLvxmQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
673a17f194aab778aa04c8cf0169171b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ