Outt
Sett
Behavioral task
behavioral1
Sample
34e5df6d867a1b6cd61fdb98764a405f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34e5df6d867a1b6cd61fdb98764a405f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34e5df6d867a1b6cd61fdb98764a405f_JaffaCakes118
Size
50KB
MD5
34e5df6d867a1b6cd61fdb98764a405f
SHA1
c1731f0414b3635222541aa0a22149e477804091
SHA256
2c7161016b42cb2900006198565c6338f6bcdfe234f7f738408ffd10052fe8eb
SHA512
1c351e8eb2c14ebaeba7b61f359a82bcd7d52c3408406dbc17577a45c4a1974cb79601272ff8c1a8181e66c64b537aea0b573b2e88bb9f470b9cc08bc183102a
SSDEEP
768:yuUr3ip/IHI7NQTvP/xqQXMqOgdKm2Lwn7wtbwh4KjRpqui2qvyGbM:yl3E0T/xHagwsnRhvj/quiX7bM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
34e5df6d867a1b6cd61fdb98764a405f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ