Outt
Sett
Behavioral task
behavioral1
Sample
1b8727e6343dc18ec765af4b58dec8e2_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b8727e6343dc18ec765af4b58dec8e2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b8727e6343dc18ec765af4b58dec8e2_JaffaCakes118
Size
68KB
MD5
1b8727e6343dc18ec765af4b58dec8e2
SHA1
d611a2c6b8e980f0c363abde36a64e70b2b8f74d
SHA256
60f969e33599df218299417c5b089b3d9f4edd156b64e8c7f94635ccca696ef7
SHA512
0bd4773e3f30a8a363ce62694219f799bbe76b3a2a59e029b7f332061c8d5ab7b4b921d12fb7b6568248a61ad634b9a31175774c3dfa5774c4db2bc24f2ad5f8
SSDEEP
1536:RVAzEVpgV44XP15ZTc6usugOHRMkeBHn9B:TAzygy4f1vTBQgE+9B
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1b8727e6343dc18ec765af4b58dec8e2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ