Outt
Sett
Behavioral task
behavioral1
Sample
655ed59b24ef85ce97d700f8b8434457_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
655ed59b24ef85ce97d700f8b8434457_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
655ed59b24ef85ce97d700f8b8434457_JaffaCakes118
Size
58KB
MD5
655ed59b24ef85ce97d700f8b8434457
SHA1
2f852bf62be86419a3e00f2f69812653baa50b45
SHA256
bab6d23b7db0aadb7bc2c72597b19d0dcaa6e0e1ab2a58448f9de7cc0684c82d
SHA512
99485dc55587c5d4020589f8b1ef51567392772862945dc8efca4a4dee1dc363b6bb704850873def6e325c81bcdea7ec2dd1899ce29fc68ea976deb5114ef755
SSDEEP
1536:1zExMwCGQ2jv6UcKu1lI14ZnxjU39nyg0j5WUQ9a:1I+wCGvz4co89nygsO9a
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
655ed59b24ef85ce97d700f8b8434457_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ