Outt
Sett
Behavioral task
behavioral1
Sample
35d94615e638e74f0d0cab497e53ddf4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35d94615e638e74f0d0cab497e53ddf4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
35d94615e638e74f0d0cab497e53ddf4_JaffaCakes118
Size
69KB
MD5
35d94615e638e74f0d0cab497e53ddf4
SHA1
2fb17cb7bbe44ae76eed6cf56ccc01d10d68185e
SHA256
b76928c814d4a5a3616eee01392ef68de5aa2ac462d99e290dc7e4f7e9d21ed3
SHA512
02e90ad4f0eb6f4d51968ca793904c43962cd299adc6048f8b792f0f3da0a5b5643e79a095ca40c705ac92e59caa1072a776cbadc699a36294ffe31086f05c6c
SSDEEP
1536:5jRmOPr3qYi11YxNijwkDOKrjBhnMwmF0PWg59qha/cIYReFzeqygX9a:xfPub1YXZkDb4cbqIBF6qygNa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35d94615e638e74f0d0cab497e53ddf4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ