Outt
Sett
Behavioral task
behavioral1
Sample
615a80e944fb962cdbc48b578afbcee4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
615a80e944fb962cdbc48b578afbcee4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
615a80e944fb962cdbc48b578afbcee4_JaffaCakes118
Size
60KB
MD5
615a80e944fb962cdbc48b578afbcee4
SHA1
eccde5b842c0a25f302efdddda203830ceb6f0f8
SHA256
1d516c7da033c58ac55004f1f176d05b1b6edbc329be00287023181bee4b1e32
SHA512
76f649a36e9b211d4387cb54df62a903d0453e6619ffebd66e7f1c1ec36dc2eeafd40b6cec74eb54743f547170db35c19f645d2dca59b46105d0cbfd234987d8
SSDEEP
1536:agF0eiyUcb5rrPFuzKKrcCRwGufk7soWl6:t2yFNrrtErfmzfZoj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
615a80e944fb962cdbc48b578afbcee4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ