Outt
Sett
Behavioral task
behavioral1
Sample
62ff269e7e34492f1260c5413890f2c7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62ff269e7e34492f1260c5413890f2c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
62ff269e7e34492f1260c5413890f2c7_JaffaCakes118
Size
49KB
MD5
62ff269e7e34492f1260c5413890f2c7
SHA1
473f754212f55fe8266028c9c1be94218c0cb846
SHA256
0abb6e939c9588044101509daa5aba66142388f6223f7fe51c48cf9e2b544fbf
SHA512
ba0316261ebc80a1e86780937ac8a64173fea4e43098a9238cfdce4f94e702b437b8120b77318c610d1541d81a4ab81910a8e67691ee7731c5fb40797b5d4fa3
SSDEEP
768:1zExMf4sJGHw2jnvWs0adAPmhpfEKwrq8UMg6G/o61jsXkVAPDDM:1zExMwCGQ2jvukXrcuVd9rV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
62ff269e7e34492f1260c5413890f2c7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ