Outt
Sett
Behavioral task
behavioral1
Sample
62b3fddfb325fa5aaaf8a42de21f02ed_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62b3fddfb325fa5aaaf8a42de21f02ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62b3fddfb325fa5aaaf8a42de21f02ed_JaffaCakes118
Size
56KB
MD5
62b3fddfb325fa5aaaf8a42de21f02ed
SHA1
49141aa7f4cc14824343ec66253ec4be6ce05782
SHA256
9e83fc0df9fa10c59e8a55fa65a710e4a3354f09df2ee68adf5eccdbd0664155
SHA512
5adf26d3b28ede71fdd3fefa09d011e8a20af6f1249d9156dc572ebd879f6c69ccf34fc908b4aacf32c703c4b459879baf119cf12c52461621fbf97c7ce67a75
SSDEEP
1536:1zExMwCGQ2jL+JVctEM74ZUdfXEBm5JC6:1I+wCGvHQURdMMbC6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62b3fddfb325fa5aaaf8a42de21f02ed_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ