Outt
Sett
Behavioral task
behavioral1
Sample
2469f79a92e6c241e9fc28b7e911e08a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2469f79a92e6c241e9fc28b7e911e08a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2469f79a92e6c241e9fc28b7e911e08a_JaffaCakes118
Size
67KB
MD5
2469f79a92e6c241e9fc28b7e911e08a
SHA1
f62d32cdc3baef5296f049598adc9d4578c0dfa0
SHA256
60a44037f4354f0edecd086c3c990c62f7a1ee4182b930c8889b7b446fa7c3bd
SHA512
296c7bbda9bf8904fe3024335aa949e76d74989775fc2ed8b2163008d551e988eb0ff45f8ea0c2595156fb42a5bda41dfa48b85f82db31177f4c29fc6c712259
SSDEEP
1536:soa1lMWiQePobYDi5WdPGCgIMRE25YnCBxIgt:SMWiQePB/PBMREoYn6xrt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2469f79a92e6c241e9fc28b7e911e08a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ