Outt
Sett
Behavioral task
behavioral1
Sample
63ef4786518a7c8812b538c030fb3e60_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63ef4786518a7c8812b538c030fb3e60_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63ef4786518a7c8812b538c030fb3e60_JaffaCakes118
Size
71KB
MD5
63ef4786518a7c8812b538c030fb3e60
SHA1
ed042d3863c29eb5d750201ef7618dd9c3deca85
SHA256
0a7165078692a420d307c004e7c0522623c6b071b4f0ee6b2766d2e376898381
SHA512
22abb2240249a14b9796dc8c99a5d2115d3b972bf41007bdcea6d3f77a8a102d3df975f638aa27436daadf70f80e608c94b1495e3b51909ea8c6e98753f2acc9
SSDEEP
1536:n7ZLNPp9pZBMTxI3HDQEFSrP0gV8y6TfryKuMZv:7ZppEx0HDX9NTfryMZv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63ef4786518a7c8812b538c030fb3e60_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ