Outt
Sett
Behavioral task
behavioral1
Sample
299e8cf7dd28d9815f71e0e876efee53_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
299e8cf7dd28d9815f71e0e876efee53_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
299e8cf7dd28d9815f71e0e876efee53_JaffaCakes118
Size
50KB
MD5
299e8cf7dd28d9815f71e0e876efee53
SHA1
508aacd5a12ff7e8dd27793c42fe98154efd72b3
SHA256
722ac3bbf51f4dcdc57bd31472e97c732be13ae9277c2ab79203a3c510d1731d
SHA512
f21be0ab58149e7606d71a7ee2f71922ae240a01ef3616e4f53b56326d503cc3981202369c6f42f30e6df51b662dcb1d0c81ec14556fddbc0189c380cb19d64b
SSDEEP
1536:V2byIeF41kLYpGtW6QRlshAu2BJbY84Q8:WBtyLYpGssqF0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
299e8cf7dd28d9815f71e0e876efee53_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ