Outt
Sett
Behavioral task
behavioral1
Sample
675ae5e5c303ad5fe945b38da194bbe3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
675ae5e5c303ad5fe945b38da194bbe3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
675ae5e5c303ad5fe945b38da194bbe3_JaffaCakes118
Size
72KB
MD5
675ae5e5c303ad5fe945b38da194bbe3
SHA1
8a2f05f6d2d35be333f2e3e5ff804369e7c86d99
SHA256
0dc358c4bec0b429754a68575830a43f1c75e14a2ae1c2da784d8e4e73c69085
SHA512
60a17b52cfe31b43a99f1214664e16a203efe1ed6f50e2468dd23663bca7a2e508fc1ba1bdee7fdc5acd0c0436fcf11135230d2bf3e2caeb28ea0fc37aacbf43
SSDEEP
1536:1zExMwCGQ2jiMX6Jfr7MivphPEj5y/0OOILn7vxe3ypSFJWRs4Tsw:1I+wCGv2MqJfrQi7EMFL7pe3Ls3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
675ae5e5c303ad5fe945b38da194bbe3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ