Outt
Sett
Behavioral task
behavioral1
Sample
e83380a1f571a4e09895e2a4cca163e4_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e83380a1f571a4e09895e2a4cca163e4_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e83380a1f571a4e09895e2a4cca163e4_JaffaCakes118
Size
45KB
MD5
e83380a1f571a4e09895e2a4cca163e4
SHA1
27539dfc2a5a57d114d2c60a3b714fb4411b8504
SHA256
6f5b289d85de5367babf0c3e37bb8a6ba9bb3d4f7b8ff16282a45881afa19738
SHA512
fd05e481a24d1d0451b07bcbe81d34a6be3f2b314c8bc45b8d5c567da440fc9f66580cd012409d2ae30576e957b133c523b9126b0594f112c848bf5a37b4da06
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTSVyCRMcdkC6sKOzad7IyK6LIbo4DtLiKPEA2qK6:mPO6KEVbsVP0gOVyCRRdkBGz87IyK6kr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e83380a1f571a4e09895e2a4cca163e4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ