Outt
Sett
Behavioral task
behavioral1
Sample
29b2e63675ba0dab05f2490a11f88086_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29b2e63675ba0dab05f2490a11f88086_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
29b2e63675ba0dab05f2490a11f88086_JaffaCakes118
Size
74KB
MD5
29b2e63675ba0dab05f2490a11f88086
SHA1
2c533006fff6de897e2ee58b962f50abd876782c
SHA256
cda1078056ee1ba7e315256b101694edce0e78208c26f5710f19998de1f3021a
SHA512
cac0f59db7e0f7b160ed2e48c1643dd5098efaec54b996362a0e2c710e501ec96bd646fb30b2db89ff45be00c04d1c6f13ae574b1fb4e9f0b4b558da1a5336c4
SSDEEP
1536:aqu6uKyq95X/yY3k37aaSlr5/GdEXuiTPssmW0VCAYqB7zUTbo:Vuuyq3/yYUaVld++e0EPRV7l7wTbo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
29b2e63675ba0dab05f2490a11f88086_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ