Outt
Sett
Behavioral task
behavioral1
Sample
60166e4a31094cfa08407be81d40e35e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60166e4a31094cfa08407be81d40e35e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
60166e4a31094cfa08407be81d40e35e_JaffaCakes118
Size
59KB
MD5
60166e4a31094cfa08407be81d40e35e
SHA1
df5e1d9d22f0299486d47e7e399e42bb5fa81707
SHA256
381fd30ee64676f517ae1bba9552a478944e9bc8c3ac3223b08c59dac35b1669
SHA512
af43a5062fe3448336b78ced75a24f7569f14c195c85f171af9cce8c42c16aefda40e353ec1c001595a70d7edfe8ae45f59e0742344a303d708767d998b34ebd
SSDEEP
1536:1zExMwCGQ2jWUhF9ilAkf34mzAmlpDdUMATd8:1I+wCGvxvsayxUMATC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
60166e4a31094cfa08407be81d40e35e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ