Outt
Sett
Behavioral task
behavioral1
Sample
63add1d3b1e39d8bc0b6cd45b50b821f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63add1d3b1e39d8bc0b6cd45b50b821f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63add1d3b1e39d8bc0b6cd45b50b821f_JaffaCakes118
Size
70KB
MD5
63add1d3b1e39d8bc0b6cd45b50b821f
SHA1
7e5be5a5100c36e524a8e7d1ae8118abc48c391a
SHA256
92e6adfdc4424c250c35d8d8decee65769552ab52877804e2d2a968c65c5591f
SHA512
5ca7d39f78b083b5cfd754f37a96e332009244c3839154f671aeb3a0227c3e4f3452cfb46150bc49e178ce8f967da9235c84409eeaf9e3e68ed4b2fc625d7e00
SSDEEP
1536:uaqqcAkGysZxDHe1p+I6teqzNlaFKxXODVTmCLTE:ufqcDGyMpe1pR6tNBlAkfYE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63add1d3b1e39d8bc0b6cd45b50b821f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ