Outt
Sett
Behavioral task
behavioral1
Sample
0d7920db39e4c13322db2d7928bfa8e2_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d7920db39e4c13322db2d7928bfa8e2_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d7920db39e4c13322db2d7928bfa8e2_JaffaCakes118
Size
56KB
MD5
0d7920db39e4c13322db2d7928bfa8e2
SHA1
b45f3152f587db2324011be5788a6a2769914020
SHA256
45ba868c7782885bf2849acd0f4e6e1a12fbb4be9061b14ba6897e3f4883d663
SHA512
ded5254932a4f6b8c59378d6d8810a02dc0df281cda24ceb9b53422515ec7f6c82d3c74bd7f0ee47d0f9cd3c4c87df03b2c45f57c0d18baaee23d48418e4aa6d
SSDEEP
1536:V2bnfBHHCSp7JM2auUrc85gmjT1oVsv8I94XL7YrCSu2:WpNd7UlgYT1SO8O4XLJ2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d7920db39e4c13322db2d7928bfa8e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ