Outt
Sett
Behavioral task
behavioral1
Sample
61dd8e560260ca2994e1558d16897ecc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61dd8e560260ca2994e1558d16897ecc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61dd8e560260ca2994e1558d16897ecc_JaffaCakes118
Size
68KB
MD5
61dd8e560260ca2994e1558d16897ecc
SHA1
9399cdcc5db860c3f454d7bb82a35db1bca9e185
SHA256
8ada39f2a67027dc36c9ef3aaef687ea15fcbea12a4329a32ff34cc3fd03ea37
SHA512
2c9b4a8855becbd1f0c7d58dc22c76dbfee08b5679f3653fb8e52049757b789933ca29ed8861cfc98f5e00e1acb74ca2d9363b2e14ccacf29bb88929defc3a8c
SSDEEP
1536:4XkTnJx7iaZrT4xPgaYP0HFLAygvJ0WXeQCVcTQtq0Iz:SKJxuW/46aYP0lLA2WyEQk/z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
61dd8e560260ca2994e1558d16897ecc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ