Outt
Sett
Behavioral task
behavioral1
Sample
6331bf424ba779e24d7a1c95d8be3600_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6331bf424ba779e24d7a1c95d8be3600_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6331bf424ba779e24d7a1c95d8be3600_JaffaCakes118
Size
80KB
MD5
6331bf424ba779e24d7a1c95d8be3600
SHA1
7f9e00a99a36736a68751746cde7cb49df0c1793
SHA256
13eb73aadec22b43cf1a21ec1036e430ab165b16076d98a85cd6dfda6b84bedf
SHA512
03e34eddd14c1bdc3a367f51740cf33ef84f63f802a02e56a5ccabe47eed4941686f099413e2edb065f933fcda037e661add0d2805606a1734ed39da8d385abf
SSDEEP
1536:agF0eiyUcbv2S984oJeFK5/lTmnjoukjwanZnMQdhBMvWrK:t2yFil4Qraj7MMQdbnK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6331bf424ba779e24d7a1c95d8be3600_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ