Outt
Sett
Behavioral task
behavioral1
Sample
63fea55d897c2bfb4de74a96e2b8eca3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63fea55d897c2bfb4de74a96e2b8eca3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
63fea55d897c2bfb4de74a96e2b8eca3_JaffaCakes118
Size
57KB
MD5
63fea55d897c2bfb4de74a96e2b8eca3
SHA1
12ef0636a3fad30e4da8a8b9f863ecdeef83f596
SHA256
b459901368827fb622441ba9429bdac7721a62b58b270ee860b03488880b911e
SHA512
5bb49a44ba10de21c0d7cf99e2a3b50689c115bde5c26c0bf0ba7c35fa8d0bdc29b1f26ccfe55db781a6bd69d618bec373a0d956e95e946a502258d609d8849b
SSDEEP
1536:soa1lMWiT7jp7omuKMHU5/C0KU90680jSyy2jWy:SMWivjeIDh670uy/jP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
63fea55d897c2bfb4de74a96e2b8eca3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ