Outt
Sett
Behavioral task
behavioral1
Sample
291cf9dede16431b40092960fc83e3b8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
291cf9dede16431b40092960fc83e3b8_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
291cf9dede16431b40092960fc83e3b8_JaffaCakes118
Size
49KB
MD5
291cf9dede16431b40092960fc83e3b8
SHA1
4e393a720af3e1ce30d3d99e79db4a6da895c4d7
SHA256
277e872a5ca7c4a3dd67f3ffd3bd083c97392244a446377fb67d3d5c2f7ea792
SHA512
61487bfde0308c9209b037a12241ea48603232cab87f8c81877bfd9a393eedacddd604833c6bd2ef4035e870d644ef9b89438a303915e5a07bed79d9b769ca2f
SSDEEP
768:1zExMf4sJGHw2jn36vWeDsM27+w9FUOiDqanmk/plPUXM0W7sfEg5TvUBBkc:1zExMwCGQ2jAWeXw9FUUUpge7u5TMBb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
291cf9dede16431b40092960fc83e3b8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ