Outt
Sett
Behavioral task
behavioral1
Sample
338cdc6e0d3c5d2ebb326a4f32a54c21_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
338cdc6e0d3c5d2ebb326a4f32a54c21_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
338cdc6e0d3c5d2ebb326a4f32a54c21_JaffaCakes118
Size
58KB
MD5
338cdc6e0d3c5d2ebb326a4f32a54c21
SHA1
0b166383a267797cbde509d494633483cb22d58d
SHA256
57999e7b943dbcb9d589ac5a8b0602cbd293e512d09ef4eb0c408a66883ce3a1
SHA512
7d2be7a4dc3ca2c74db0389e265eded48295216b8609db237a370c98f681ab49b1c90d8ca0150758ac55c5138e793aa840db9aaea8519c1909a6b8875a2acb5c
SSDEEP
1536:V2bq5ViwniiZbWX1lNIBTsOXzVUP3ynWcVAlcbdMN7K:Wq5ths1lMTs6yQulcbdMBK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
338cdc6e0d3c5d2ebb326a4f32a54c21_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ