Outt
Sett
Behavioral task
behavioral1
Sample
6078936845852bafe24038b0783d6833_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6078936845852bafe24038b0783d6833_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6078936845852bafe24038b0783d6833_JaffaCakes118
Size
58KB
MD5
6078936845852bafe24038b0783d6833
SHA1
a6660ead9c83fc8253bf22522fc7cfb1b86b3e69
SHA256
0159f96c2cc74670b5486f1776e23588858b028d3960d1b500878bff563b85dc
SHA512
583a5ac0050094308e13a5504ac5b2521959f6b67f9304f9ef18f5e0f4c89e8f270e9e780f59786add4f48eb23326022ed836d18d047b3e9501d0117e0441cb4
SSDEEP
1536:V2bLV7zUJcZ/ga1zQf8LRo25iSZ4eKGUFELa:WBr4KYf25NZ4ebUoa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6078936845852bafe24038b0783d6833_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ