Outt
Sett
Behavioral task
behavioral1
Sample
18ba0b2d06af73660ef5dc91ff5fc08d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18ba0b2d06af73660ef5dc91ff5fc08d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
18ba0b2d06af73660ef5dc91ff5fc08d_JaffaCakes118
Size
71KB
MD5
18ba0b2d06af73660ef5dc91ff5fc08d
SHA1
822b8c53cfe6e43286a46b4ff9ebfcec4293104d
SHA256
27d1726ce53e82212d17c7aca8215539db281741caa187747c5827a44b665cab
SHA512
0103241bccf6043fbba0bcd20e2d852e6c703e00cd733568f19b9cfd34d3241c3fcad8ac2fecbb9afc8f5deda52c7be108b8cf73d9f14bb382ec9b48cc7b5bcb
SSDEEP
1536:e6PViKoQJHFeMrqcz7TRvFPXLd9QfU9vbk:RViKom0M2q7TBFPXLCUVg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
18ba0b2d06af73660ef5dc91ff5fc08d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ