Outt
Sett
Behavioral task
behavioral1
Sample
5d85e7660eeba1ff209ed1caef938420_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d85e7660eeba1ff209ed1caef938420_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5d85e7660eeba1ff209ed1caef938420_JaffaCakes118
Size
63KB
MD5
5d85e7660eeba1ff209ed1caef938420
SHA1
fb70182e8856dac51c4f4752677e3f7e29529ced
SHA256
0516d92a2adc59f0ecf6cc867868450e71edd3702c64df72f028178a9db89a74
SHA512
204eddfbd4b50d2170f17288c19a1a0cbfe3b1e1cf6e73f3e314d2a8bfe61e85a3136411701c1be6eedce47a257fb862791d3d100a5ecd8a094cfdb0fd12695c
SSDEEP
1536:anR/MGWm5h8ZQetvtfluaHgQKsjOupqB3ojZ+p:aR3WAattvtfw7kqB3oj2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5d85e7660eeba1ff209ed1caef938420_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ