Outt
Sett
Behavioral task
behavioral1
Sample
2ae4d6d637abadff33b4c95d6aec3853_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ae4d6d637abadff33b4c95d6aec3853_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ae4d6d637abadff33b4c95d6aec3853_JaffaCakes118
Size
60KB
MD5
2ae4d6d637abadff33b4c95d6aec3853
SHA1
16fd19b3a337ef4eb65a6e039df98eb3076d0cb3
SHA256
31e2702e31a29a5f58bc6ae856088641d3d98da6d95c69f24adf2a47b9ff9a85
SHA512
cde0628a176581f12b260cd3b0cc889574916b838525d3a3b6d9cd148d27a5dd92de6a25b10111e15cbfd9cbdd2852b06d791bea2b014bac5de709067f6de21a
SSDEEP
1536:soa1lMWikRxrvsRrCTp0bStrtgnScl07hL/VO9:SMWiashEyStrud67hLdi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ae4d6d637abadff33b4c95d6aec3853_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ