Outt
Sett
Behavioral task
behavioral1
Sample
59ab6fbb3cf73d67b14bce62abd41e02_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59ab6fbb3cf73d67b14bce62abd41e02_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59ab6fbb3cf73d67b14bce62abd41e02_JaffaCakes118
Size
70KB
MD5
59ab6fbb3cf73d67b14bce62abd41e02
SHA1
2a63e7994a0d5f2037301c89f115f492d1d94479
SHA256
6ad74e359ce01ebda127cc6c094333f5cdf0c3f81c2ec2181d07d51583aaf2f0
SHA512
66a62e71f0ddfb3664562189f7b85c900043738459a7b1d5050da20e97b65fba007c116e991584d621c0d6c98ce81f381b9f2feb1e3e7241d4dd93a28e7500d6
SSDEEP
1536:9XbyLopsBfuRLXzQJaX5vjsa4Sndp7puAkpw/vwP7/cEde9Viommp:VbyspsBf4iaJvjBdp7cxwwrcEdOiox
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
59ab6fbb3cf73d67b14bce62abd41e02_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ