Outt
Sett
Behavioral task
behavioral1
Sample
f5a62d09eec5ab5ff4c09e94012b4235_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f5a62d09eec5ab5ff4c09e94012b4235_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f5a62d09eec5ab5ff4c09e94012b4235_JaffaCakes118
Size
53KB
MD5
f5a62d09eec5ab5ff4c09e94012b4235
SHA1
4b634449850fafd3ed97a03f2a4e140f96c9a844
SHA256
3f3dcd7b07ac054ebb594966d98a8f53b87d1ff372bf35df6740caf65ae2aaa5
SHA512
a23e7c59ee0dc35d8b9e2d0eda53f5a7920968b5587b3c808e4e08c1a4fab6b5273e9dab1cc7f76c904ed7d6aeba5360cc83ad9c91018763306287a7eeaa5c4f
SSDEEP
768:Gx4m7JNSll3dTG+e56k3cNsKRRWJwzBUnugtRY0dHyu1SqKiDv5hYWUxX5:Bm1NGJVGUzzRWvKF4Ln5hhUxX5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5a62d09eec5ab5ff4c09e94012b4235_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ