Outt
Sett
Behavioral task
behavioral1
Sample
41807d2519eecdb1d3db234bb6926bdf_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41807d2519eecdb1d3db234bb6926bdf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
41807d2519eecdb1d3db234bb6926bdf_JaffaCakes118
Size
64KB
MD5
41807d2519eecdb1d3db234bb6926bdf
SHA1
1493a76d3598e6ca74b9f989c03600160d22b32f
SHA256
21900092f7c41aebcc295f9df0e303f0bd5439fcba5319b03c4926456d96cf15
SHA512
b0a1b8092e9b5532704293d7fd4492b1e631964fdfecce6320a4a2a2973ff20d80ea975dd3f85400496ed8dea4ee48fe4e56bdad7b7f1dd7a2c46d0b96f97619
SSDEEP
768:nbY4lwTL44QYdfEWCP0Nq6vs1b5QtgHUG42pJIbvy36MFO9N74JpIgYxPCdKJRz2:EGFidf36NGm0G4EIbv4c9N8czV3vG3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41807d2519eecdb1d3db234bb6926bdf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ