Outt
Sett
Behavioral task
behavioral1
Sample
2302484917d7e3cf01cee2d0e70ee2df_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2302484917d7e3cf01cee2d0e70ee2df_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
2302484917d7e3cf01cee2d0e70ee2df_JaffaCakes118
Size
58KB
MD5
2302484917d7e3cf01cee2d0e70ee2df
SHA1
7c08d8fd4394410776834b1445bef84c45021b05
SHA256
e41f23a4f28e5afe0b5b71567287cb73f02a1df3731aa31cc44cc3b9d3677ecf
SHA512
9963c19d618f526c6d63808c8f1a9ff9e4873c08abe2b62ecf90acbbfa06084a4bc1486561c84e41006dd17ffd7c357b1d96792242e899f93d47ebfa9a83b171
SSDEEP
1536:+VZmwH9UsgFeG1I8GkjVDgE8QvobTdBc16:KkwiFFzIcjdgRnTdmU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2302484917d7e3cf01cee2d0e70ee2df_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ