Outt
Sett
Behavioral task
behavioral1
Sample
40c93127c666c180e5a3bc0458b4b318_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40c93127c666c180e5a3bc0458b4b318_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
40c93127c666c180e5a3bc0458b4b318_JaffaCakes118
Size
60KB
MD5
40c93127c666c180e5a3bc0458b4b318
SHA1
368593bea63b7545ab08586cc472d9de7acf944f
SHA256
2fcb8796d8df114dfdd4343524f5b2e9a14709f86adb95dedad70fffbecfa90b
SHA512
8504daad97f6e5e978ea3847e3dd023e4146f8bd85d4e9d62aa12d0228a5a865e7b972f704ce9c7ccf222ab3c456c9d965f5258a5e0350cad600154df6a10733
SSDEEP
768:GbvLDaaMact8TxkcjujrpaBMPUo2CtPTXs+UthHp5v7Qn6nbjC3/Gkcqegjda9VV:evi+bo2scDtJ0naCv7egjQnmNR9dzwNf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40c93127c666c180e5a3bc0458b4b318_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ