Outt
Sett
Behavioral task
behavioral1
Sample
611c15919f750afdd790dfef8739dde1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
611c15919f750afdd790dfef8739dde1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
611c15919f750afdd790dfef8739dde1_JaffaCakes118
Size
59KB
MD5
611c15919f750afdd790dfef8739dde1
SHA1
8f2f3957654f7198785f4283f36c71612f4aee6f
SHA256
34e619a8b29764dd20e3778ecfd1e452970397b4cafcb8afc6e39f516ef335df
SHA512
1a6957067bfb586c6e3df5dde2c0782f7fd59c532291616701ff9a1f46f7a4ce764720eb3619f87a4e79f3a72da2329555295076cf1c09ce647ebf2ee0e8152c
SSDEEP
1536:1zExMwCGQ2jlNFYpovRk8vkG279t5YMQWO:1I+wCGvpDYoJ7vkGit+db
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
611c15919f750afdd790dfef8739dde1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ