Outt
Sett
Behavioral task
behavioral1
Sample
67cbdf5e1d66a4cfff7937bb3492d9ef_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67cbdf5e1d66a4cfff7937bb3492d9ef_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67cbdf5e1d66a4cfff7937bb3492d9ef_JaffaCakes118
Size
57KB
MD5
67cbdf5e1d66a4cfff7937bb3492d9ef
SHA1
40ba486dc85db4021b7dc43ef9397d4be6363336
SHA256
ae36f981393f2dcb887a75b624d9ab13a66e04398c8450f55f626eac5c0cd662
SHA512
924b74fc9b12c9918d7b2a52f195abc993214182d991fc2f09377a5dbd7326fc4f1316733de45cec942886ea3f997f9b90574b4e15e16063dc87b31be3219291
SSDEEP
1536:n7ZLNPp9pZBM332eWNItxxktObH1tB/ebG:7Zpp223Itkm1tB/ebG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67cbdf5e1d66a4cfff7937bb3492d9ef_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ