Outt
Sett
Behavioral task
behavioral1
Sample
608b6317d9ab93d01fae96490e6c027f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
608b6317d9ab93d01fae96490e6c027f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
608b6317d9ab93d01fae96490e6c027f_JaffaCakes118
Size
53KB
MD5
608b6317d9ab93d01fae96490e6c027f
SHA1
15d0d98902f888f91bcb483da1e53cd64bec7d6b
SHA256
10ec0ca2b4f78a01da4d67b5092637326357dc47de07fd6f2bd233d045eb9046
SHA512
c58d58e12b12ecb0fadcccb887a75aed049b43c2d8b5fcb7c4387002ac2e0a7997d5ed673d50981ebd22622da1c43c3040416ebbe612c6b98533d1485030da47
SSDEEP
1536:GQ3tfgXKpVlVZO/X5oUn0nhdi2J21LiNE3+xQ:VfgXKpVlVSpjn0n+2AFvx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
608b6317d9ab93d01fae96490e6c027f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ