Outt
Sett
Behavioral task
behavioral1
Sample
16ce59e90d1e987380d1a401aa48f29b_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
16ce59e90d1e987380d1a401aa48f29b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
16ce59e90d1e987380d1a401aa48f29b_JaffaCakes118
Size
45KB
MD5
16ce59e90d1e987380d1a401aa48f29b
SHA1
85c95b62b031129977e1350e6702d8fa6b1a7d66
SHA256
14f946818fb6c2bf61e45b0879c4007247078d3ab64c2b5c37bcd8863f0f6619
SHA512
5d4c2d5d061c0b087360f44d7a56366f5538e45553a559322e66c2768869aecf68d4e5709554c012f93fd8c8fd62850045a84f176ae054d24c5fcb993aed9bf2
SSDEEP
768:szM2xVVC1UTY9mu06jpw7lVo5/aiCy8UHE4vwV8tvEunDLNJA12Y1TBNi:V2b2UTqP06ju7lVa/a/UnMunDLNJA12X
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
16ce59e90d1e987380d1a401aa48f29b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ