Outt
Sett
Behavioral task
behavioral1
Sample
35c6cfd6c780229ed4f884397ac2e419_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35c6cfd6c780229ed4f884397ac2e419_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35c6cfd6c780229ed4f884397ac2e419_JaffaCakes118
Size
47KB
MD5
35c6cfd6c780229ed4f884397ac2e419
SHA1
64d379dda173d7412246ad7294703794108e09ba
SHA256
409e6ec775bf06ab7bc68d0feb94933097cc4597a520249c79aa06bcdb742196
SHA512
10b5e2f89a146544ad118fb1d5374d12505a23773cf9c79a3d19eabc1cf028d837feb3cecd4c0a334eaf32bc1e55ad636290e01e57629d3974cfa964261e1252
SSDEEP
768:p+CZXHs3NaLaMSuK29jTAxuIC9tcTOew844GtvGxWaJ3GtfU7TZoFxSNonOJu/Z/:p+CZ8LwKKjTAxuIKew8ClaVGtfUPuF7P
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35c6cfd6c780229ed4f884397ac2e419_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ