Outt
Sett
Behavioral task
behavioral1
Sample
45b11518cf4479268890725dc8cd69f6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
45b11518cf4479268890725dc8cd69f6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45b11518cf4479268890725dc8cd69f6_JaffaCakes118
Size
53KB
MD5
45b11518cf4479268890725dc8cd69f6
SHA1
57ef7fad24de4086a7f8c2bc252941320131d297
SHA256
bbbede6fe5ee50884ae9b2e3489dd8aab70f2bf63b2127f72de80f5fed1d84d3
SHA512
72480b4b0e5105a73dd76a6b8d3d7fcc79887ac3d41198aed1a442ba9b7857291e544ef600708c9e2bf2e69dc4e8cd195b1a4cf1553b1a0234f49ee125729690
SSDEEP
1536:APqmOCbgf2aTH1XeLGw7RCW96MnlsTAQIXHjjVgBxTv:cqmA7HloZt/2AQa9sxr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45b11518cf4479268890725dc8cd69f6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ