Outt
Sett
Behavioral task
behavioral1
Sample
2379461743749addab6ba6c67c6ebb91_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2379461743749addab6ba6c67c6ebb91_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
2379461743749addab6ba6c67c6ebb91_JaffaCakes118
Size
56KB
MD5
2379461743749addab6ba6c67c6ebb91
SHA1
e249ad6242d12ef7e5ff3b639e31fa7a70e3a34c
SHA256
c3c4b02352f563e9f737df983e29b30ca4f2ed5ecb8e5685a451646587456ca9
SHA512
67f3a13d497fea271bf9bf2ac51b070e684ddec0986fddc7adc664fbd608d11d8857ab4d1f3a1c722c5bfc8ca475f6450dbb88720bdd2a6170cd06dc0de8fae4
SSDEEP
768:qz6nzm1b5gNZLLrPkC4b7OKdFjRnWFKA5wLkkHttIfgSz2AwtDd0KRGtL1:qmmMnkNO2FjRVA5Ck4oPUtaKktL1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2379461743749addab6ba6c67c6ebb91_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ