Outt
Sett
Behavioral task
behavioral1
Sample
f6f723915b48a81624f514d94413c84c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6f723915b48a81624f514d94413c84c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f6f723915b48a81624f514d94413c84c_JaffaCakes118
Size
53KB
MD5
f6f723915b48a81624f514d94413c84c
SHA1
84e0e0e823380dda4451fb9aba45d4b332502c26
SHA256
6ca0c5d5dd5f8e08a58fd935a48e2c6eae4a99349a9f7b3805e9ed7abd0d01fc
SHA512
175f0db1e8670d5cbd5914cd6ec7ffc81bb6447a603b1a502540543dac0a08f930d6fe24d694240ae34a50bc9b73b8aac6e1972be0d5600d6657826a9e5c4585
SSDEEP
768:GbvLDaaMact8TC0Eg0gkmNnaEYWEuqMm+bnaWDIKBv2VBJaqc5agyfVj+jwiTPMN:evDEgjNaEY8Vm+uWDzkXUb5JOajwiotj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6f723915b48a81624f514d94413c84c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ