Outt
Sett
Behavioral task
behavioral1
Sample
20d1244f477e3a4f73ca1bd2909bbdc8_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
20d1244f477e3a4f73ca1bd2909bbdc8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
20d1244f477e3a4f73ca1bd2909bbdc8_JaffaCakes118
Size
53KB
MD5
20d1244f477e3a4f73ca1bd2909bbdc8
SHA1
8ecf955b3ddb389c22e96bae9958b0172bbaa26b
SHA256
a14dab06aa34b7a798766d064a1cdb1c1f495bbfe387afc73ffcca1785794c55
SHA512
23962c3aae705fe6af0a680d13080680bc53977035b32b9e37162a7158c795eafb9ea56c2c01a2a027f65ab723c4cbb16c3030ec17a85c397fb09a48a4456c94
SSDEEP
1536:MhBRVgrExucMaDS3PDB69uD8VX8YOWniMSOfov:cRRskED98l8YOWi/Uov
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
20d1244f477e3a4f73ca1bd2909bbdc8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ