Outt
Sett
Behavioral task
behavioral1
Sample
61e2038ebf2ecb934f6bc9d3dc0f0ca2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61e2038ebf2ecb934f6bc9d3dc0f0ca2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61e2038ebf2ecb934f6bc9d3dc0f0ca2_JaffaCakes118
Size
77KB
MD5
61e2038ebf2ecb934f6bc9d3dc0f0ca2
SHA1
bd2cde07b506c6167f19a0f8200f1541df2049ac
SHA256
08a42b55aed51fcc6abc838101be218aa20238828ec730b5b77d0f9050632b95
SHA512
4e9a9f46daaeba3a60563cd70add54d49902b56711dfd089e08a4e787e62df4da5e4368f0132df9942d71941b544008dfa5c88b5061415fe38402af00e929ca9
SSDEEP
1536:+VZmwoo21HKfLlA+l+58UTfXge2UC2KsHKxUdOo:KkwoRKzlHlXte2L2FHKed1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
61e2038ebf2ecb934f6bc9d3dc0f0ca2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ