Outt
Sett
Behavioral task
behavioral1
Sample
6118210f3f746fb80c9b6ba6d0c2cc97_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6118210f3f746fb80c9b6ba6d0c2cc97_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6118210f3f746fb80c9b6ba6d0c2cc97_JaffaCakes118
Size
64KB
MD5
6118210f3f746fb80c9b6ba6d0c2cc97
SHA1
bca7636039f43738ea43d429bc3aa21c81d9b4a0
SHA256
5ea92d9d6695c21df51ea18fb796eaac52318a3cccb208d5c35629ffe684bd40
SHA512
0a59a9d610608cbaee14fb80a2cd9a818d27d16a8f2e7f4e8de6a5cd9e7a8746809ec125bc2ed4ef4c72529293cafbc5158272e1d341014afe2c44bfbe5f8722
SSDEEP
1536:jZIcCxRUNU2vxcCK4iP6GOpbVqTo7V2r8:x+mNU8cbPVO1skp2r8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6118210f3f746fb80c9b6ba6d0c2cc97_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ