Outt
Sett
Behavioral task
behavioral1
Sample
611f6d6eca2b235b0dcf63da26548035_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
611f6d6eca2b235b0dcf63da26548035_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
611f6d6eca2b235b0dcf63da26548035_JaffaCakes118
Size
39KB
MD5
611f6d6eca2b235b0dcf63da26548035
SHA1
931a244ee46d80f7025b37d920836475faebd7d5
SHA256
85ab5c122d633f6f54338cc7fea1fcfd92bdbbaa67358a6fb27012f3ea5c0348
SHA512
d7ab129ca9a9e78f9e43eee4416cef4d60ca95028d4d920f88a60db127a53c68f58dde4302cc0348ce4ea0db98136967bfa3a148c1e59fdd3df2a0a6388e3032
SSDEEP
768:szM2xVVPvv3SdCG9KGAj3Mh+HfObfrNEppA3csRd2gt1AK:V2bN/puhAj4CmbDNEnSp9AK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
611f6d6eca2b235b0dcf63da26548035_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ