Outt
Sett
Behavioral task
behavioral1
Sample
325491a9b0d16925f89c5ac5591b79e8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
325491a9b0d16925f89c5ac5591b79e8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
325491a9b0d16925f89c5ac5591b79e8_JaffaCakes118
Size
51KB
MD5
325491a9b0d16925f89c5ac5591b79e8
SHA1
6fbd0c45bfdc78a945e82d616bc81560dbdb74df
SHA256
b5966afd730c2650418c30e7fa1c066c595c2a4309d945f47cbd311f2382fe66
SHA512
b0bfe30a59e765f02265853a35b32bbac317d573d15b4f5c9a132461aa9b36e8e30d9b6c53b0368b721403c671e5f43868544f008c7a76b0c92dc7b470d57062
SSDEEP
1536:GQ3tfgXKO70ie8u1v6YdeeQoQKv+jKskriTZwVe9j:VfgXKO7zw1SvPMv8K5rMf1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
325491a9b0d16925f89c5ac5591b79e8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ