Outt
Sett
Behavioral task
behavioral1
Sample
61c5f2b68e594a4e7a45623636b81172_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61c5f2b68e594a4e7a45623636b81172_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61c5f2b68e594a4e7a45623636b81172_JaffaCakes118
Size
67KB
MD5
61c5f2b68e594a4e7a45623636b81172
SHA1
8dc8c1e3c7242724b4f99b34ac249f6374071404
SHA256
2c839b08cb00ed3958e2092a1865103f62ea0bbc5a7699e17db8a06485b0326c
SHA512
d5e824f7ccbf15ce030b8b05b6cb8b58bc2b8d553f3af543db8e9b9b1ce4e7330a05ba0a682c6e49eb926de0aaf7ecf3ce76a181002d0dca50c56663f49db66c
SSDEEP
1536:VZIcCxRBO/vrsKvdE2fJ6akEOnJFUV7BNzC1TDbgyqp4fWQ:r+jO/zx1KNJFCnW1jgyU4OQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
61c5f2b68e594a4e7a45623636b81172_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ