Outt
Sett
Behavioral task
behavioral1
Sample
2ca688efec0ea90cb52f504468648710_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ca688efec0ea90cb52f504468648710_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ca688efec0ea90cb52f504468648710_JaffaCakes118
Size
50KB
MD5
2ca688efec0ea90cb52f504468648710
SHA1
18c6735247831e89ba675b4911d44bd50d51551a
SHA256
938dd97037a0fca1496fabf83e149b9d66fdf8bded0e65fd2751198b29123559
SHA512
5f1582907e675ca6f7521fda232347654bfccff0ee91192d14310c994767098c7846e6dceb175d227eec9b859524f1cf7a7fde1c26a9424dbccebb79fd9e6976
SSDEEP
1536:V2bTqm/AXla9z4QP5fkqFMPjy8zFhnq4c:Wm6se8QhfpIzJJbc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ca688efec0ea90cb52f504468648710_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ