Outt
Sett
Behavioral task
behavioral1
Sample
679a10675bb0a04c12323bb82d7f45f0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
679a10675bb0a04c12323bb82d7f45f0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
679a10675bb0a04c12323bb82d7f45f0_JaffaCakes118
Size
72KB
MD5
679a10675bb0a04c12323bb82d7f45f0
SHA1
51ea51c9c9b23bef5341152c8a8feec68aba0f09
SHA256
8e834b9ade4da1909d7519c92e7d108f9c2a9f5676a95b98fd3b3f8ab7b904c1
SHA512
7031e30fe94f9bcb95198ffa85ee66ed9c1fec34ac1b574c7c8e6c537fbadbddc0ecc54cdfd775c13c308e849f59868a5699022e7dd9e2fabf86e9704940bcac
SSDEEP
1536:MhBRVgrExucMMSNCrXDMirB5qz/4GTg7Jg/kqcTrYDAxRTtl:cRRsOsO4i1I/HT6KkN883Ttl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
679a10675bb0a04c12323bb82d7f45f0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ