Outt
Sett
Behavioral task
behavioral1
Sample
f2f075db6fa85088dea57068107e6775_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2f075db6fa85088dea57068107e6775_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f2f075db6fa85088dea57068107e6775_JaffaCakes118
Size
64KB
MD5
f2f075db6fa85088dea57068107e6775
SHA1
d825482bd972db666d2caef6559688e851e5f99c
SHA256
7f3e64e6d2330cfdd9c769b541558b295e5881a0d637ac7cace1fa0a5b3fbf49
SHA512
dc5c8ce279e753d3315775d052829edf74673b4c62de49244eaf72c1c1fb9c7337f963c9c619fcb869190f4db148d0510a079b5e752f6e64a781b01ef0054a59
SSDEEP
1536:9iQk6Ga2zvos4nCCrOGkhaAV8Q/2y80nGzKSaE:xk+Cos4nCCCGMj2r0qKSaE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f2f075db6fa85088dea57068107e6775_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ