Outt
Sett
Behavioral task
behavioral1
Sample
0729eabee6ef2bbaa0e5d5830699e19b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0729eabee6ef2bbaa0e5d5830699e19b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0729eabee6ef2bbaa0e5d5830699e19b_JaffaCakes118
Size
68KB
MD5
0729eabee6ef2bbaa0e5d5830699e19b
SHA1
57ea26ccf74fbc1060ccc5f4eccf2c5de742d61f
SHA256
4a1f0847156f191a879e6095b61bf95c8cbdd80301b684af7e457a80be0fd8a8
SHA512
3f4c5e6275dd22c2e048986db6b75c75f5d21193ca1d7b3f90fd9f0f94df6b87a13bba3e82148dcc851c28cd5088792404397554af3cbb6e76f8a9a1abf3a072
SSDEEP
1536:evgvzaF+uWf+7tWojWX1Jewr963MOgwKQV3EPPum:Xa+uWf9jeBpl+PWm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0729eabee6ef2bbaa0e5d5830699e19b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ