Outt
Sett
Behavioral task
behavioral1
Sample
1aeaee66cc020cf3e83f0f6f1a3d94ff_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1aeaee66cc020cf3e83f0f6f1a3d94ff_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1aeaee66cc020cf3e83f0f6f1a3d94ff_JaffaCakes118
Size
66KB
MD5
1aeaee66cc020cf3e83f0f6f1a3d94ff
SHA1
8ef95ae612a013b27110c206732f02c3b44ed59f
SHA256
7981ef492b496aa41c0b1bcb7fe16f19b9f72b8ffe94cbea95999ce4f00c75ff
SHA512
ce3eb8696a65fb16000976be6cfc010a849818a33fe4f41c275fae8724749796893149c48938790f6c2650e82c98b52660214fa5085026bfceff949793a5673c
SSDEEP
1536:n7ZLNPp9pZBMdmM7G7aBdRtjivdPRYAZIsW8Fo1f:7ZppRkG7a/RtjGdPpQf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1aeaee66cc020cf3e83f0f6f1a3d94ff_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ