Outt
Sett
Behavioral task
behavioral1
Sample
6469e29e48f93b8ad5016be24315505f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6469e29e48f93b8ad5016be24315505f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6469e29e48f93b8ad5016be24315505f_JaffaCakes118
Size
66KB
MD5
6469e29e48f93b8ad5016be24315505f
SHA1
78cdbbbc59b0776dc01a08f460dd71a74b9ac63e
SHA256
5dc50f0ce683b0b83be14116d1512fbb929de6cdc596c12a5eacb5ef3545a001
SHA512
8ca16baf469f1c545b603e2a11e3ab41b42afab4f5a6a0f7ab1af5365e627024b378bf97c48f86fb834293fc35b985501d809d66a9e506f7ae80b768ffa02d41
SSDEEP
1536:yl3E0T2MOgj0EQ9Xtjny9A/LKrLWxStXEKC:E39/GdtOeerrtC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6469e29e48f93b8ad5016be24315505f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ