Outt
Sett
Behavioral task
behavioral1
Sample
638b5b6a9d21eb4a7c0538c6492ded37_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
638b5b6a9d21eb4a7c0538c6492ded37_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
638b5b6a9d21eb4a7c0538c6492ded37_JaffaCakes118
Size
54KB
MD5
638b5b6a9d21eb4a7c0538c6492ded37
SHA1
0ce4d836b78e165a14a65e12fd2e3810bf5b0a67
SHA256
1b8cf3cf50556842f6f945bab4a8b1b0f35975863ce879d49fd6b4ae930860f1
SHA512
0aad81490912c06ac207c294ca24ef86936a233a9756fb082abe92c1da140d8ff6c750d9d4f9a55633dc8f6e95085d592509717de963983272ccb44ef919a05b
SSDEEP
1536:p+CZ8LwKKjTACFqGYs9vQ+TAWf46f4Fn8qV:gXE7bbPuUEn9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
638b5b6a9d21eb4a7c0538c6492ded37_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ