Outt
Sett
Behavioral task
behavioral1
Sample
45dd091fb502b1d01a8b0ef28cf6f152_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45dd091fb502b1d01a8b0ef28cf6f152_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
45dd091fb502b1d01a8b0ef28cf6f152_JaffaCakes118
Size
69KB
MD5
45dd091fb502b1d01a8b0ef28cf6f152
SHA1
74a35ea9221d62915107e87672ac960cc79b2efe
SHA256
104fa5f97a31d012d34a535ff243a78bc9ef580628bd0a18edfb28c1969882f2
SHA512
890bcaf0c24d5cb8cf7cf6a2f143ecc0acc945f0f6bdc0a18141c74124931898e5b7cfca56b65ca3769ee47f21f46e70dc21d588ed994d639d6c31714cd4be35
SSDEEP
1536:Bm1NGJVGHuruN0sxV9v9bLilifuzc/q496LFRqiq+7GZT:kX0VeuruNBxDqifacX96LFRrq+7GZT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
45dd091fb502b1d01a8b0ef28cf6f152_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ