Outt
Sett
Behavioral task
behavioral1
Sample
312f06ce252d206b03e4d6444beb1077_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
312f06ce252d206b03e4d6444beb1077_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
312f06ce252d206b03e4d6444beb1077_JaffaCakes118
Size
59KB
MD5
312f06ce252d206b03e4d6444beb1077
SHA1
f033d3820be5000bb54d57ee92d376eaf2454684
SHA256
23d03abc8497ee2994a550884df78cac780d05cff88e78132e1d156de82b18f5
SHA512
1dee9ec3e45e22e8c5f2c3cd530e741133142d00c9515fb852a90fec32fd5f49a049f72cf82a1f12d8741bd23765452e58e2cbb92bdc1450751384300f9b44f6
SSDEEP
768:56IRmOOu9f2dErjfo6nn1wTdCYy4EmCL6a+3j5vvoZCrfkMJO+Vt4pNU2HAK5VwV:5jRmOc2zETb5wMJO+IpNU21+nV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
312f06ce252d206b03e4d6444beb1077_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ