Outt
Sett
Behavioral task
behavioral1
Sample
36c52fc735ba7c080afd291297d647fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36c52fc735ba7c080afd291297d647fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36c52fc735ba7c080afd291297d647fc_JaffaCakes118
Size
52KB
MD5
36c52fc735ba7c080afd291297d647fc
SHA1
f2ad4e5d97e62e34b82cff1dbea87c1e61bec224
SHA256
130fe75b5c07e2c2c4c4962ead1ccf49dcc7df2a782cb515781b35dfdff4b35c
SHA512
7ab02f21a7706f7d9ef89f4ad071e3fd80e766d553ab82428c2a5042ae5910861ecd166a627e6dd160529e36775cfb45948f77532212d7cc3737d5c2bb6f74f3
SSDEEP
768:1zExMf4sJGHw2jnjXxeiIz70zTQLhAPqYtALM5xpXH67vwHxNAWuO2VfoE1/:1zExMwCGQ2jjX8Azs6iTLit222VAEt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36c52fc735ba7c080afd291297d647fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ