Outt
Sett
Behavioral task
behavioral1
Sample
2484841af80ca88d8c856d52dbf3baf9_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2484841af80ca88d8c856d52dbf3baf9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2484841af80ca88d8c856d52dbf3baf9_JaffaCakes118
Size
68KB
MD5
2484841af80ca88d8c856d52dbf3baf9
SHA1
651bda990a2bd31893a967fa1be403378c13a34c
SHA256
29e517a787fd7b6977ce501575fdfed82a417e466a8caa68cd5540b2dbdae781
SHA512
6d7c79c93d91c6bd2596cbe68ceee709f2c16ba775a3d7686a8c78dca32ecf4d24f4d7642f6d0bc05747249ec32507c69ebdbd1e75ed935943e4f6145db1981b
SSDEEP
1536:yl3E0TzsTU1vJL+FWOyuI+frtrQrhINaMeN96mGCCFa:E39UT+FQJyuI+D1QrhI7eN990Fa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2484841af80ca88d8c856d52dbf3baf9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ