Outt
Sett
Behavioral task
behavioral1
Sample
217bd778ccb06a6096fbe762490aff2a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
217bd778ccb06a6096fbe762490aff2a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
217bd778ccb06a6096fbe762490aff2a_JaffaCakes118
Size
61KB
MD5
217bd778ccb06a6096fbe762490aff2a
SHA1
77032a359bd78da3e65fdafcda9f5786ddb120ce
SHA256
5677fc3e6de2f2a01680339fcff72b3f3b8c819f78673cb691aeb90c21640987
SHA512
0f2012e92cbf925519831e1683254c429c42847e19eba4bc7902d87cffede0bfd344b0fbdf00d14dae687be1e61a5714a9908bf16ab31195a4c2270884ae9911
SSDEEP
1536:wXx6VUyYlTzFR/BxvHQL0nGm5Zlu0MjW7ndrwZ:IgVtYlHFXxvCeGEZoixA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
217bd778ccb06a6096fbe762490aff2a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ