Outt
Sett
Behavioral task
behavioral1
Sample
63b9b3c81090d75223a2c9b1f01bca3f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63b9b3c81090d75223a2c9b1f01bca3f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63b9b3c81090d75223a2c9b1f01bca3f_JaffaCakes118
Size
59KB
MD5
63b9b3c81090d75223a2c9b1f01bca3f
SHA1
ad9cb54fe29ad46f6da7dcc542ddb3f2c52b551c
SHA256
8330eccc956b27da68e9afb371f97d7bc382356793f4166812a0043be2dac675
SHA512
a96cff0356e1f2b0a171672d8a303dac9636dc32645604443e4893c35d4c036b826215f8a38e43e29898f6f51b9e138fdb816439ea2fb989582b3a1de804d461
SSDEEP
1536:yl3E0TppPbdv04D/AAia/ZDNiz2iZziFhwe+uNmeKw22Q/rm:E39vPRv9DYAiEZiZfef8eKw2/m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63b9b3c81090d75223a2c9b1f01bca3f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ