Outt
Sett
Behavioral task
behavioral1
Sample
381352ee7a102530dfeb81a92bac965d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
381352ee7a102530dfeb81a92bac965d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
381352ee7a102530dfeb81a92bac965d_JaffaCakes118
Size
66KB
MD5
381352ee7a102530dfeb81a92bac965d
SHA1
728f91782b4eea0c0bb17795c67d18ae4f111a21
SHA256
0ed52d1ef7d92642c41471d05793ce6ceaf18f5c1a16e5ba4cb0c4164e22c271
SHA512
1fb43b42ee0a8d5cc36c1fb505b5052b4cc9bbdf1534860eacff4a23062756e3f201d0085d471d714876905dd4251ba2e543d9d7812fdbfa34c77f306a600d94
SSDEEP
1536:EGa9hVHMiaeYXXDA83zSk4cTyz5c7GLKvby:EGazui7UXek4gHiAby
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
381352ee7a102530dfeb81a92bac965d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ