Outt
Sett
Behavioral task
behavioral1
Sample
1b75d55747ef079a0bc407e565b3b440_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b75d55747ef079a0bc407e565b3b440_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b75d55747ef079a0bc407e565b3b440_JaffaCakes118
Size
43KB
MD5
1b75d55747ef079a0bc407e565b3b440
SHA1
c9f0dd904a8e77bf50e33652b023db6eafc43923
SHA256
a047c059efe36f1088bc29b5e6a5b3a9a2360964fce6a8b152925f3f5989d410
SHA512
25b34ae3ec5d9a78e19bd15e71e91b5e8a1a439ea6df25dd01d90c43d516dabf91c4b80f9f1e1d81f68ddd58e473460605c56ce7e5701d76bd9caa58e064f170
SSDEEP
768:p+CZXHs3NaLaMSuK29jTAsEFPe29yzfuvvDmWR9C6a+b9nvOna6S2L:p+CZ8LwKKjTA4mXDxvaNal2L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1b75d55747ef079a0bc407e565b3b440_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ