Outt
Sett
Behavioral task
behavioral1
Sample
e98a50ff612b4a482be41e119780e89c_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e98a50ff612b4a482be41e119780e89c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e98a50ff612b4a482be41e119780e89c_JaffaCakes118
Size
64KB
MD5
e98a50ff612b4a482be41e119780e89c
SHA1
df6062c968d4344d623aa783d9dd592e7877485e
SHA256
62ef0ffefc34b3d984545dca692205e83bd6f52bb8ec62b37e9c291c8f50859d
SHA512
adba56ab542c73db59024ea0979fcc60de3628eb92d62300950b2be823fab3c61480907fa16875415376862ad762ad6a5ab34cd7bec806a50baec59fabb4eddb
SSDEEP
1536:MhBRVgrExucMRPynNg1AB6EBJsxWIze4mpXb3S0Npdg:cRRsjPynNg+/nAFmZb/No
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e98a50ff612b4a482be41e119780e89c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ