Outt
Sett
Behavioral task
behavioral1
Sample
654e7dc0c30de9088310ab9f1311c7a9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
654e7dc0c30de9088310ab9f1311c7a9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
654e7dc0c30de9088310ab9f1311c7a9_JaffaCakes118
Size
57KB
MD5
654e7dc0c30de9088310ab9f1311c7a9
SHA1
7770d1c0ac1757c89e25472b1664d77b5a536dd4
SHA256
8c877b7fd51aaf4deca3f367f6f08007c6b6b34c5a3ffd7b777b28c312731308
SHA512
b964e9b25d9dcc11d43d6e75d19a215d9f904341865f4bdc2d1d68f7317c45fa883f6dd1aa5cc80b7c1e39e2de0dc36dc89578e679c224674ce67ed309c5d8fc
SSDEEP
768:nbY4loF2t9zCn8m6W0LGK2dPKDwCnn4wLFmDOV+jY/QWP7wsz6Mp2vtcTc:EGmV0LGKMiDwE4eF7yY/P0SP2vuTc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
654e7dc0c30de9088310ab9f1311c7a9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ