Outt
Sett
Behavioral task
behavioral1
Sample
6218a6a136e651dc2f298f3b2500233b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6218a6a136e651dc2f298f3b2500233b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6218a6a136e651dc2f298f3b2500233b_JaffaCakes118
Size
63KB
MD5
6218a6a136e651dc2f298f3b2500233b
SHA1
1a519f96a889f645aceced487af601ee2cd13f9d
SHA256
8e0998400987c78d74d782da3c03fd5f775a04da212c8c74d4f200632315f678
SHA512
777b576b069588ae03356163b4a7523ef316beb5b559285a4d52f556cc2ebdb37b4e5a7259e496662ce60e62ceb21539f0261eef1a7dc8c2f9976742f21cbee7
SSDEEP
1536:mPO6KEVbsVP0gpWqb2B7FfEXxkBNwC3piCElh4XjngO:cMEVbsVc0zaB7hTBvpTkOUO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6218a6a136e651dc2f298f3b2500233b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ