Outt
Sett
Behavioral task
behavioral1
Sample
619b66d657aca61da127572bd1eb840e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
619b66d657aca61da127572bd1eb840e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
619b66d657aca61da127572bd1eb840e_JaffaCakes118
Size
47KB
MD5
619b66d657aca61da127572bd1eb840e
SHA1
e8b0d2fcd577d40214186dcb7a1036685e26bd4b
SHA256
5a34fb2ba14ea4166f04e8511acade1ef50475d7e1926b856a6329120ade86bb
SHA512
911aa8609866f00ca89a7fe5334e918eea5e8e9839c484ac1518872df978dadade96c9734ad3670c23968289538cd16c617f1a9b3b54e324f8870a1cc0c74070
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTrzs5ZMJvg2SmWmRo65vkeZTH+0xwPbV0GPD58Vf4m:mPO6KEVbsVP0gHzuuvQmRxvVFHfwjuGi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
619b66d657aca61da127572bd1eb840e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ