Outt
Sett
Behavioral task
behavioral1
Sample
615cc8d9f9d861e82e31900a0fa76740_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
615cc8d9f9d861e82e31900a0fa76740_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
615cc8d9f9d861e82e31900a0fa76740_JaffaCakes118
Size
60KB
MD5
615cc8d9f9d861e82e31900a0fa76740
SHA1
56da96f6f24717b435bc2852492370e38032b63b
SHA256
1b118d4a9a8582a7238b9b1be28dbc9f23f3a67169e250cfef4e45ba60af7d1f
SHA512
0ca5598ca482b10790b2a6a0f2379629cf09a966e37dcad030ec11d0fb0812bac98b79f10278a5e6edce42e0e8554a187be74097a1612526b3899cd4e78cf25d
SSDEEP
1536:EG8RLKif+IOgpiPeTlckBpNAk1XXmiMNQGeGj1:EG8RmDnFolnpNDRX0NQGeU1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
615cc8d9f9d861e82e31900a0fa76740_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ