Outt
Sett
Behavioral task
behavioral1
Sample
15821f741089f46b4b026564d81afdb7_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15821f741089f46b4b026564d81afdb7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
15821f741089f46b4b026564d81afdb7_JaffaCakes118
Size
44KB
MD5
15821f741089f46b4b026564d81afdb7
SHA1
9d3bd2061b1fece27e06b8e04b62899571a022a3
SHA256
9ba76e57e4ee57f3ac32b22e4123dced0c3a69cd208a988a3badd9dcaa26333a
SHA512
8da0bddd3d3b15780f9b12f63f6387d2c9f53c706b20e531dfa603c08fda4637bf2475afa7a08757c3d0992d317d9ecd325d61754e441ffe18c48bc207bd8257
SSDEEP
768:h8WTpVT0X8zb+7t0XooAgSDUvoLvCHj/GrCK9HzCifCVfI0pxgXqD2V:RVqt0XooCTKrG+WfC608Xs4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15821f741089f46b4b026564d81afdb7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ