Outt
Sett
Behavioral task
behavioral1
Sample
380656798365c993733db4b7abb86307_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
380656798365c993733db4b7abb86307_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
380656798365c993733db4b7abb86307_JaffaCakes118
Size
53KB
MD5
380656798365c993733db4b7abb86307
SHA1
51bfdf93043c78061923552ab76c7ac52adb8f9c
SHA256
4321c7b0ad09268078092c50138c2cf411c548f40181532ee8a9ec1f10c9b237
SHA512
dd1c13895bb959ae24a35eccb2c903dd736fb7f4fbdd269f4ee448c0511205773a52220c61f73a5e32195093e108f6b8388fea55fdbe8e3f12899ce50b0e5adf
SSDEEP
1536:9RzMyUKcHxa40ujWK8HrRbLRaq4q+bmnc/:0qQJZPv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
380656798365c993733db4b7abb86307_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ