Outt
Sett
Behavioral task
behavioral1
Sample
6020a9493fe5eb8a19fcfd73e3f5cd6d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6020a9493fe5eb8a19fcfd73e3f5cd6d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6020a9493fe5eb8a19fcfd73e3f5cd6d_JaffaCakes118
Size
59KB
MD5
6020a9493fe5eb8a19fcfd73e3f5cd6d
SHA1
aea9f360acb4737e5fed820d590c9c4a0c52286e
SHA256
2d801d7e0a42a4b463f2b7468b0805bc59962511a5822b3307dffa07c0ee718d
SHA512
0b1f03d0d1c4b96de15b6ca60c772013bc7f8c1e25edd3a0ec14950473805850445686c121598c235c85c854c86bf1d69cbaeca87dc846b4d4f261186bee6bdd
SSDEEP
1536:1zExMwCGQ2jHmDXGSNVWOgSb7uttfemk0V/b:1I+wCGvyDbVJgdttmpO/b
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6020a9493fe5eb8a19fcfd73e3f5cd6d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ