Outt
Sett
Behavioral task
behavioral1
Sample
43e76eedaf34aa41a42f8670837afccb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
43e76eedaf34aa41a42f8670837afccb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
43e76eedaf34aa41a42f8670837afccb_JaffaCakes118
Size
62KB
MD5
43e76eedaf34aa41a42f8670837afccb
SHA1
4df01f6d532ef3d70da9f1a4135e2cdd17ec0b1d
SHA256
297a36762526c51d1952516765f78b55d956319a179727518b98a3b79656cd4c
SHA512
9830d8c67bc62af94739a41bb130fcb32d4d160242e68904c80232faabf88d1ac43a93e9a0271a486c52144f58132aa028e13877da92d72c62ef7d8a600585f9
SSDEEP
768:hM1opOjOOfwv0GbAGw45hjvTO2pk27ZeiEUA4YDSGpy8xjI7CYccXSlw1KImyMVm:anRAc459O2pkeeBULY+GpMScClqmyE41
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43e76eedaf34aa41a42f8670837afccb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ