Outt
Sett
Behavioral task
behavioral1
Sample
ea3bf1a453dcb012996006901b3bac9f_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ea3bf1a453dcb012996006901b3bac9f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ea3bf1a453dcb012996006901b3bac9f_JaffaCakes118
Size
79KB
MD5
ea3bf1a453dcb012996006901b3bac9f
SHA1
af486ca006738a6507cb0f1c681ea00434d03446
SHA256
66f80feb920f8be0c4086a2e0c27ddc8cc184e8c9a77bed34d2367880625c7ab
SHA512
c5c55d80f19cc9b473903ebd71834d137860f2bef43c96c0d7583438aac54649abdf9db633c5642d757a52b781d862aafc28c8fe868824f5f6e1d90eea82afbd
SSDEEP
1536:YJEu0nVKj2FZHOnf4wppCr6EnqbQ41P84cnZ9llz2vo0108nOuk:YmJnVKKj8TFyMb0hnZn+o010Kk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea3bf1a453dcb012996006901b3bac9f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ