Outt
Sett
Behavioral task
behavioral1
Sample
017e4f6b32c09790acdd1ca85dab2e90_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
017e4f6b32c09790acdd1ca85dab2e90_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
017e4f6b32c09790acdd1ca85dab2e90_JaffaCakes118
Size
60KB
MD5
017e4f6b32c09790acdd1ca85dab2e90
SHA1
36450c7a7365909212d993f30f9d6c69168bcfac
SHA256
be6bb3ee5fce42ce7abcfd2ceb1261f039235f308e2c074bdf420283ab41de70
SHA512
5df07dee3ee1a5953cf8ad46ba1e716ba0ed20208e76e1d80470a1b81f0da00008dc4b968adff02fc06ec154559be679cd1f29e5b77e5dd3d812ed84c9af4e8c
SSDEEP
1536:GQ3tfgXKWXSPnw77/SQpNV+dErS9qr7uLBdHTp+:VfgXKWXSPwPSQpz+dwSz3HTY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
017e4f6b32c09790acdd1ca85dab2e90_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ