Outt
Sett
Behavioral task
behavioral1
Sample
24d06cf062c16dbd59bfd0c7bd5f2872_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
24d06cf062c16dbd59bfd0c7bd5f2872_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
24d06cf062c16dbd59bfd0c7bd5f2872_JaffaCakes118
Size
54KB
MD5
24d06cf062c16dbd59bfd0c7bd5f2872
SHA1
5ab9da1bd1ac1eab148f698bef5eed8327882054
SHA256
abf36c01e7ddbe8886e4e3ebbe9264420700584ef9c63f4dc85c17ba2cf6f560
SHA512
c5879178c9aea37b4a8ea5bd3f9b3eb934028cf1b1a9e6e24b769742b0d3398bd96cdc2e13383f06445273f7ab389a888818e5992ddb49a9b62d3a2a159dae55
SSDEEP
1536:EGZpU0XWkgl6T7xhk3qmqdGlUgiZTmoXLffU:EGZpU0XWkjnY3qUU7ZTzI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
24d06cf062c16dbd59bfd0c7bd5f2872_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ