Outt
Sett
Behavioral task
behavioral1
Sample
27d12fd6bc6adb16165b44f64e9e6168_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27d12fd6bc6adb16165b44f64e9e6168_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27d12fd6bc6adb16165b44f64e9e6168_JaffaCakes118
Size
70KB
MD5
27d12fd6bc6adb16165b44f64e9e6168
SHA1
68d0e213bf59de95a6bef0dd9721356ec5eac9da
SHA256
bdcf063902a2c039ec74d59b9b0a60d31f43dd3317af9e3f8eb1dc6f86ec6483
SHA512
de35f899bf0856eae8b985da4d6ad7125d1c4dacd62c27e583f0a079db2021e8a315a33ac6ed8e266542a872e0520ceb93f5a5b38654c85ed596bdd8ddb4db3d
SSDEEP
1536:Bm1NGJVGCeZ1C9VO0Yp3fxOOnYUeSzFvrr/tIdx1ukWbc+:kX0VQ1Gwp3fFnNxv3/YHhWh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27d12fd6bc6adb16165b44f64e9e6168_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ