Outt
Sett
Behavioral task
behavioral1
Sample
067d88a883280e5dd89a81c560b106ff_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
067d88a883280e5dd89a81c560b106ff_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
067d88a883280e5dd89a81c560b106ff_JaffaCakes118
Size
62KB
MD5
067d88a883280e5dd89a81c560b106ff
SHA1
4dd3f2ceb43e3bcd073ca94ceb461f9a7098448d
SHA256
92a2046e4ebe210f9c7b1ff853fe1bd9f17a4873708ee0c632982718f031254d
SHA512
763e906bb3c1b5afe04aab68f49b1370d1af040e3376aa944e97f7c0f1ebd2e517b489d335c6bf4ddcc864a6cf9f93bc76e19063f07230d414b770b31db41bd9
SSDEEP
1536:wXx6Vs/8ZhzJ6DS9AejorPFn0RKKq/E0aNi:IgVjnyMZAOYKq80L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
067d88a883280e5dd89a81c560b106ff_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ