Outt
Sett
Behavioral task
behavioral1
Sample
678150ee79ec5e02c6284ec05fad1b6f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
678150ee79ec5e02c6284ec05fad1b6f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
678150ee79ec5e02c6284ec05fad1b6f_JaffaCakes118
Size
68KB
MD5
678150ee79ec5e02c6284ec05fad1b6f
SHA1
7052baab469f6c2289ad3e144afca78245f1d23b
SHA256
17f0d816fef713a1ec043e82f775ca4046509e621495070897a0a1687e4335f1
SHA512
1e72961ed195d44cc85a1e0e9aefba9d03a9a65e02fc8c261ab1d5eb730391f9c586afaea1823fc0d97bf7b4baf0c28ca2973db6a6cced9903e78c13450bf0e6
SSDEEP
1536:anRuUkuhxTNXlZ+/S9kkGUwZb2ib8VFW9zf3hWw/NgZ:aRuUkaxJXnvXwnUc9zfxlk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
678150ee79ec5e02c6284ec05fad1b6f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ