Outt
Sett
Behavioral task
behavioral1
Sample
61da7415c10fd172aced930135cdbc62_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61da7415c10fd172aced930135cdbc62_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61da7415c10fd172aced930135cdbc62_JaffaCakes118
Size
74KB
MD5
61da7415c10fd172aced930135cdbc62
SHA1
b2bd1c38add62bfd7b0e47bb2a605a09b190c11f
SHA256
41e7b93fbe540c67d985a373e460a294b8d61c0e253525f885c5ad15638b449e
SHA512
82d0d253c488a00f637a2b3c288a6a333298203ab1e9a6c2e2d6778104c61f1075fc8aa44cc15632013ea5085215a5d84bc861b3224faad640cda7545e11274f
SSDEEP
1536:Bm1NGJVGQvq6W9Xj9aUdjOaFJPoGLTk38Acb4aAtAd:kX0V5/Q5hdyazjvSAb4a8Ad
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
61da7415c10fd172aced930135cdbc62_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ