Outt
Sett
Behavioral task
behavioral1
Sample
f61e655e324b4382b560d53869a25409_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f61e655e324b4382b560d53869a25409_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f61e655e324b4382b560d53869a25409_JaffaCakes118
Size
72KB
MD5
f61e655e324b4382b560d53869a25409
SHA1
d75163580005376a45f2ad84dd43dd756b0feb72
SHA256
3c53861dd6dab68a2ca46aeb50e00c3cb05ce211845fb310328e76c79d15cdde
SHA512
1f337c2be367fe03aaab0d044805c909c455d9a06bc15b2451023db495cb62f5f04735b10d7c259f97678d7ef81fb3b7441d8ff66ce265fbf0b01693bd95a90b
SSDEEP
1536:yl3E0TF0/4ZNd8NO99wtQ802ePVPLwQaB9YmTIU9GOxrY6HeKs:E39Z0/Wj8Nm5802wVP0QCYmTB7AKs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f61e655e324b4382b560d53869a25409_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ