Outt
Sett
Behavioral task
behavioral1
Sample
6428548b840d8a7b5048272ae0ef0418_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6428548b840d8a7b5048272ae0ef0418_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6428548b840d8a7b5048272ae0ef0418_JaffaCakes118
Size
63KB
MD5
6428548b840d8a7b5048272ae0ef0418
SHA1
9cdf8bcfc9f644c7d7b6259989cbc6877f911eeb
SHA256
54b2bf1c1ce36829dc6cd1315fcfe4cdc15393f6652fb8f2f662988db5f92e9b
SHA512
c03fb34187f3f56a687123801f780804166ff3e190c2a02f483b4ad93eee11cc60c7ee0df800a41d3ebc7d7d0fc6f9204d00b71c30759d5eda7a4a5c1c388072
SSDEEP
1536:yl3E0TK6qnw7AP4LA9e+ZaE6QqO+4FZLtwtltT:E39pqn4ganSnglB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6428548b840d8a7b5048272ae0ef0418_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ