Outt
Sett
Behavioral task
behavioral1
Sample
1bc52c7c2918b64c5401816c0d93c7f9_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1bc52c7c2918b64c5401816c0d93c7f9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1bc52c7c2918b64c5401816c0d93c7f9_JaffaCakes118
Size
59KB
MD5
1bc52c7c2918b64c5401816c0d93c7f9
SHA1
2c57ad994f06c0515d9a22855cedff25cdace160
SHA256
406221daffdc9633f3d63add8bce55b617d879afe9321eb62b3788dec478e4aa
SHA512
6645ae020bdc66de9ff75052a0a959d2157abcdc1b4ae16c86eb1962e753392cafec2994c2d2cff39aceee67ca3d1e5dac4d23eb6c305c68db57450ed9e4fe6a
SSDEEP
1536:RVHuFmLMrk3/+TTNQ3UL0++BF1S691CTgUYSoy4w:THu61viQ3H+2S69igXSoVw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1bc52c7c2918b64c5401816c0d93c7f9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ