Outt
Sett
Behavioral task
behavioral1
Sample
28805de4a712cf0a1703b39580e77006_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
28805de4a712cf0a1703b39580e77006_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
28805de4a712cf0a1703b39580e77006_JaffaCakes118
Size
66KB
MD5
28805de4a712cf0a1703b39580e77006
SHA1
e1e99da7768821c5cf213537c9f0cee23abfe22d
SHA256
993cb3fd7b24c900899f6616c01d46aa0503a4f73e31def1a7df661dc3206091
SHA512
bfb03955f1c99ebca8571dda04dc479a31c67cac681ffa873d47600b3340d9ec77a6beadf592b7fb38962d63e6fae8e42d25673fc0160656dc75f9912e27fcec
SSDEEP
1536:tIpSQ0Sm9nc8K8vh4+R5zHGlpBmgZQLK2AkDjS:1+knnhZ6lpBmgZQLLS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28805de4a712cf0a1703b39580e77006_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ