Outt
Sett
Behavioral task
behavioral1
Sample
420c3c8fa56c62b49f7d9d833414a7be_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
420c3c8fa56c62b49f7d9d833414a7be_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
420c3c8fa56c62b49f7d9d833414a7be_JaffaCakes118
Size
64KB
MD5
420c3c8fa56c62b49f7d9d833414a7be
SHA1
f59af2998ba5e5e6c0b699bb5c61f8da60438804
SHA256
0061d426477cd4b69e50a556ae9dd2e2150658d4dc1e6b0ad0f4f2487f325d44
SHA512
d318a9377e2ee2043605783ac8b4760227c05a6452c93a5efbbc48cc7b69728adadcc4f156234fe69454d0461ecb5e9800bb019424e1ccd757e9bc981de1e4a9
SSDEEP
1536:s65kurGweWxl7+0DtIDnVUnSql+n6xuPEbD:trhee9KVCSql+n6os
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
420c3c8fa56c62b49f7d9d833414a7be_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ