Outt
Sett
Behavioral task
behavioral1
Sample
26eb1ef9552ad3c31b4260cd2562b242_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26eb1ef9552ad3c31b4260cd2562b242_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
26eb1ef9552ad3c31b4260cd2562b242_JaffaCakes118
Size
72KB
MD5
26eb1ef9552ad3c31b4260cd2562b242
SHA1
2cea26bb983a0445886187b44cba23d78004a80f
SHA256
5402ad982d4b3f81b8e3ac4e65fc8d56b6222dabd58ce9e9e3a76c8c881e028f
SHA512
a7c47664b7a3732ed5d49273c12ced98a6acfbd62e4516b3911b970614a290d826b29abf61e0518f58e377f93fbbc901ab8b715ac9fc612e51761a23a1f48295
SSDEEP
1536:yl3E0Thgw9M9YWKdjt6MbjAZkUMivylkNdj/KkHUL5B8:E39B9iDgh6eU7MiIcNt0L5B8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26eb1ef9552ad3c31b4260cd2562b242_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ