Outt
Sett
Behavioral task
behavioral1
Sample
64fc555cb1faca6e48084e93af5dad93_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64fc555cb1faca6e48084e93af5dad93_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64fc555cb1faca6e48084e93af5dad93_JaffaCakes118
Size
61KB
MD5
64fc555cb1faca6e48084e93af5dad93
SHA1
c998c747e185170098fe1a50783363c272340e47
SHA256
dcba3b4071b9a2287cb6fa71ff510b8c3fbd5d4452e17c025c4680dca9fe00e2
SHA512
30fa44919fde6937f5c44ac9776bf1ab4d40c5aa2173ffe4c0cd08a9e03e0d9683952cf00eb5e12b9343c0cb241599a6a8eb9a68bffbcb82ee7f21d8a2a7b64b
SSDEEP
1536:9SJ+D1S5qkxGgvh/4AYB6yQWVsRpF7gVj3Rpng4AYN:o+D1S1x/v/Ywj77gVj44AG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64fc555cb1faca6e48084e93af5dad93_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ