Outt
Sett
Behavioral task
behavioral1
Sample
64f3be878d72ab6fc36cf590e4558155_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64f3be878d72ab6fc36cf590e4558155_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64f3be878d72ab6fc36cf590e4558155_JaffaCakes118
Size
82KB
MD5
64f3be878d72ab6fc36cf590e4558155
SHA1
1666ce50047367adfa56327f2e4857e092b51745
SHA256
9057be9a4cbe09eeed0535001bccb987140865083d10fecb8659c3507a3e1f91
SHA512
8e4c7c4adff2158372c32d6c28ce8d5549eeced681fe2535a5b2894372edd0451a29902a9797fba98f0de1b5ec5a480eb96b22d0ec070ae558ec82117f2a1a4c
SSDEEP
1536:yl3E0ThTFMPYXk0eFNbpVkxW33IAFdviC1X70H/f2CfgDhR3GdQSiNJwAHTuHYY9:E39VTUQk0qpVkxWoAFtPwoNRNhzuHYY9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64f3be878d72ab6fc36cf590e4558155_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ