Outt
Sett
Behavioral task
behavioral1
Sample
0f0b823d996c3330f494f1473f48e112_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f0b823d996c3330f494f1473f48e112_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f0b823d996c3330f494f1473f48e112_JaffaCakes118
Size
57KB
MD5
0f0b823d996c3330f494f1473f48e112
SHA1
bb6ca3e8d93453d94d53e6ad3ea791268d597787
SHA256
c357bc3c01a848672f89a7e76f73dfa00942bc3429c55182d27af2c527a36d9b
SHA512
a96ae24b8d0a3ddedf7c2cf886b66be3d1c8abafae1c67bc9a028e9f26714d8dd212e9b3132c2a3164a9ddc65abb7d0cb75cc7b680fb1b0574d10f77b155f81b
SSDEEP
1536:V2b2ldAvP560rmF6CDGCOLIpY2U89eB49ulRMlJDyP:Woy3trO6AOcpY2UOeBuSmO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f0b823d996c3330f494f1473f48e112_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ