Outt
Sett
Behavioral task
behavioral1
Sample
37917abd85214026e904200bbdab13d6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37917abd85214026e904200bbdab13d6_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
37917abd85214026e904200bbdab13d6_JaffaCakes118
Size
71KB
MD5
37917abd85214026e904200bbdab13d6
SHA1
9ac9e10a21a96a536d1a5f8d15d26a5fd3e79c67
SHA256
9234b12e9ffa5ec29fa560674ba0d3ed740cf07717f953b769841ac288fb5fbb
SHA512
9844369954629ff472abc2eab0bdd6c816a121d9d7ff13aba1afa2cccf152fa65f2e0191cca42c3df51f31e4490a5ba6ee0c572ffe3915e531efedd442944c3e
SSDEEP
1536:V8O9Nn6RjricpKf7I18DqabQ5Q6SSi9nDtlX8munIKbyrzFT/kfq1j907L3:2Oz6VWyKDtnExsnZls1nIvpkSIX3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37917abd85214026e904200bbdab13d6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ