Outt
Sett
Behavioral task
behavioral1
Sample
62918c919180e56a3c74b0e959a22d8d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62918c919180e56a3c74b0e959a22d8d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62918c919180e56a3c74b0e959a22d8d_JaffaCakes118
Size
48KB
MD5
62918c919180e56a3c74b0e959a22d8d
SHA1
c4edbb1da9a574e110fc4465c8a09e1e816a4a47
SHA256
1c3ac8d2facbdbfa940dc8f7587cfec774315c2dc35b89cfb112c80500c9ceba
SHA512
741a745ca3d6f126bed9344958eafc16c9768e1563c9eb43a31f25f292851cdbf5bc171c9dccfdf06170caca2651af208e94b62d03ef80bec0dedd68a49bf26d
SSDEEP
1536:MhBRVgrExucMxXvGKsxSzhH3TMhuq/uIxZA:cRRsDbzhDgvvU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62918c919180e56a3c74b0e959a22d8d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ