Outt
Sett
Behavioral task
behavioral1
Sample
f82a91744a9bcb7ed15ed6aba80ce774_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f82a91744a9bcb7ed15ed6aba80ce774_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f82a91744a9bcb7ed15ed6aba80ce774_JaffaCakes118
Size
56KB
MD5
f82a91744a9bcb7ed15ed6aba80ce774
SHA1
956d3b2c82dd0700fe04316b94029f7e760f0b35
SHA256
5ab86ec58934c495c46407962b500cf58257febf398d442bd3630cf962904537
SHA512
a58229115834aff852293a9cab4535eef8b08f07218354fc91abead5c2f85d856879069b1b0e897f037cb8ee8a0f210e6cb687404d027ad9c507420e09f85361
SSDEEP
768:yuUr3ip/IHI7NQTvrMLsGYF9nOBpZQ0CxyfiZe0tJCqzzoUTjbQILLIpcPyXCG4/:yl3E0TTMEOBMreMJCeUQIB8ySG4MV/NU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f82a91744a9bcb7ed15ed6aba80ce774_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ