Outt
Sett
Behavioral task
behavioral1
Sample
0fc936ced17c344d46ee953096c75a62_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0fc936ced17c344d46ee953096c75a62_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0fc936ced17c344d46ee953096c75a62_JaffaCakes118
Size
52KB
MD5
0fc936ced17c344d46ee953096c75a62
SHA1
b3f2043c4057560440d1d36279b9ad0a8a42cecd
SHA256
5455ab4503b8702176c82eb3847f93796820d9f011e0118ed5dfd787994a8d09
SHA512
8f7950df13f60e74234927003ef77c69ff4594c3edb1136244c0e1d64ace89bfecf4026e13c18ee23f487407fd50b8bc271b30281475974fb7013f90323639d1
SSDEEP
1536:+VZmwKJ3qHn+KEq7LOpena5PhAKnC3vl9i9Z4qUxgUzD:KkwF+KEq7LOkna5+KnlqYUzD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0fc936ced17c344d46ee953096c75a62_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ