Outt
Sett
Behavioral task
behavioral1
Sample
64b7a69531ef2688c08083ab8dae604f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64b7a69531ef2688c08083ab8dae604f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
64b7a69531ef2688c08083ab8dae604f_JaffaCakes118
Size
53KB
MD5
64b7a69531ef2688c08083ab8dae604f
SHA1
454130ccd9efc1fc69d90d07be747118636cf176
SHA256
d5e185b74ae80462f23d208654ddb4c975cc2cf6f29c67940c9ec3b24e708d8e
SHA512
fe68c97161054529ae4d071624f9bf95f61f66ac92f2f638788005d79ab149d94551bd03890d6bb2e4f9f948c2f9e8b8e2aa10bfa9fd2b5674983df7744ed436
SSDEEP
768:Gx4m7JNSll3dTG+3cCDpyQV0lskFU4WVwhLvkIWBPPmtBQNmXic8VU/KaUtaKBZ:Bm1NGJVG4cifilx4whL3WB3EviKUtaKT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64b7a69531ef2688c08083ab8dae604f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ