Outt
Sett
Behavioral task
behavioral1
Sample
21258651aa8e93a25b8411a5d2e66706_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21258651aa8e93a25b8411a5d2e66706_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
21258651aa8e93a25b8411a5d2e66706_JaffaCakes118
Size
61KB
MD5
21258651aa8e93a25b8411a5d2e66706
SHA1
0ac9106b1a8968f97c1ecabf30354d745c6eb3b0
SHA256
27064cb8d3d3422acecb031890b0d16f8c23e044effd31ff0d9116b46690d2ef
SHA512
b808aa73a0453dc5bd57293656a214d6dfa964d1e3bb75fddd44853abb22067344116d5a651cf09370f5a34b7c6ff82699d166ff5bdf0c6e217f6bc2ced53f73
SSDEEP
1536:HKvv9jeCw6l9n+Eu2aZge+gg2yjS+bDjPMzfIWw89f:TSHu2aue+2k7bD7MMWt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
21258651aa8e93a25b8411a5d2e66706_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ