Outt
Sett
Behavioral task
behavioral1
Sample
637e2ac6bef5f16b58069757634e92b0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
637e2ac6bef5f16b58069757634e92b0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
637e2ac6bef5f16b58069757634e92b0_JaffaCakes118
Size
60KB
MD5
637e2ac6bef5f16b58069757634e92b0
SHA1
97ca03149a5f9e8fc0b4ab01a26b55eeb413d159
SHA256
749bcef269a5e2175a115eda6c8231060eb0a198b9ae163bdbd6b6581562ad76
SHA512
614d602b593d63c633e4eb4e72a3d56a03a4c44d3a63eab735f6c825a833e90e57f0b747ff5519d9b3be414a8db13b16d221f61e9e96511e4ae72f10138fdd63
SSDEEP
768:nbY4lNzNwZ2BgHtGT3sk5hbHVd/pHQCZcqdoZlSAeiFjFgSAJiP/pyBs4ExaNk9m:EGNMHijH/Vjc7lRTBFgSAm/sBYagip
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
637e2ac6bef5f16b58069757634e92b0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ