Outt
Sett
Behavioral task
behavioral1
Sample
ed606f2f6a6e3a21b1441a42967a902d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed606f2f6a6e3a21b1441a42967a902d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ed606f2f6a6e3a21b1441a42967a902d_JaffaCakes118
Size
64KB
MD5
ed606f2f6a6e3a21b1441a42967a902d
SHA1
102072c75a0642b9b6be7a68a91ca169381d52b1
SHA256
5217433ee656044cb3640cbddc8e69540e25e2c52e6a13dcff8fb7d5069a70ff
SHA512
570371ac4e199f1112d2db0b3292ceb1948db05b831b79c683c46809304de99c00c7b8209606ffea491c2c167a67c4918265c4aed3845d43dccd0bc6b9d0110d
SSDEEP
768:yuUr3ip/IHI7NQTvXyCfk05sJ2J5kc3UsgFvykjrGBaqrk6mZVi/s8zvrFlt8:yl3E0TPNp5s056xF1Tqw6mZsk87Zr8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ed606f2f6a6e3a21b1441a42967a902d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ