Outt
Sett
Behavioral task
behavioral1
Sample
650d3035b4f9bfa124d8d961d4db2855_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
650d3035b4f9bfa124d8d961d4db2855_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
650d3035b4f9bfa124d8d961d4db2855_JaffaCakes118
Size
71KB
MD5
650d3035b4f9bfa124d8d961d4db2855
SHA1
58c431c87a24edbb7027f4bd4bfed6c99b93271d
SHA256
8a63eec1a489dc8a7af43ecb124bc65d6a46940e83bef054f3c7bc8f8b311fa2
SHA512
9048d54d7f3446b04cd080df376fd2c8b1121d882c258013014d451a7a0afd17e9dca55c28f64e461cc85286ae5f5878065497bd495a7d8d37516d73f5d91aba
SSDEEP
1536:Bm1NGJVGT7OU/UfB12KVGm8XBssZix74xPuyZiC4alCZhJTyl:kX0VsF/2Fu1iR0vH4awZvTK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
650d3035b4f9bfa124d8d961d4db2855_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ