Outt
Sett
Behavioral task
behavioral1
Sample
40ef087c77667a50f6f2fc2b940f9f24_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40ef087c77667a50f6f2fc2b940f9f24_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
40ef087c77667a50f6f2fc2b940f9f24_JaffaCakes118
Size
62KB
MD5
40ef087c77667a50f6f2fc2b940f9f24
SHA1
eeeb6fe2c5f8c41c554fdbf7c5fd525c0038aae9
SHA256
0b37545358174693ebd447014843475bc2d20897de1e5fe541be197e90e629ea
SHA512
ae95d0ba87593834042164ea2d8def0e691debb2adb95503223cd8346da968476cce9b91b378969322b12042ad8a7800d59e57bd3a94fef0254837c9a893d436
SSDEEP
1536:GQ3tfgXK9ExeHTWOQwAl2KvbUHLnhY3r/iRp3n+Yk32s:VfgXK9E4HK5pOY3ORp3U32s
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40ef087c77667a50f6f2fc2b940f9f24_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ