Outt
Sett
Behavioral task
behavioral1
Sample
43f582c6093a4e82024e95e85ed81bd9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43f582c6093a4e82024e95e85ed81bd9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43f582c6093a4e82024e95e85ed81bd9_JaffaCakes118
Size
55KB
MD5
43f582c6093a4e82024e95e85ed81bd9
SHA1
d3b3f590aceb8abe75afb300178dcb943303b5f1
SHA256
2687731d4bd643b5615dc58c54e8c9190099d05d6409224cf1b7670cc5cbea6b
SHA512
238fe6889e7d2826e12fcdbbd58073feed9f16412f9bb5302b8cd2044d7d64cfc24d29e5412041d0325236a0b323dc1ba10645637899a62ac8e87c5b6a4668f0
SSDEEP
1536:yHZNUyA1KsS9Q2OHpdtp/e9T0lP/mf/IS0S:yHIDqwpd2wP/w9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43f582c6093a4e82024e95e85ed81bd9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ