Outt
Sett
Behavioral task
behavioral1
Sample
6084c5f36f9a2e0b6f52b163a8e4413b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6084c5f36f9a2e0b6f52b163a8e4413b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6084c5f36f9a2e0b6f52b163a8e4413b_JaffaCakes118
Size
44KB
MD5
6084c5f36f9a2e0b6f52b163a8e4413b
SHA1
10d1d2f6d9bf6ac501d4f082b06e2fe151110776
SHA256
c8c45e7908834f2e0a42a64effda85d09ebf5f54d450a8a05b3027001f825fc5
SHA512
d35f3452c1eeb5451df971e03d60cb65bd948b68067ffe74fcffc04476197bd49a330302e8094adfc68381d9816c960df5045622569d8ac72f674157eacac9c6
SSDEEP
768:wX7l2i4+6WhcbSia6VkjHpebSAhuJ+OSczZpIouauLaM2X+yVaW0D:wXx6VrGJeTIJ+OHzVuLoX+yot
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6084c5f36f9a2e0b6f52b163a8e4413b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ