Outt
Sett
Behavioral task
behavioral1
Sample
6469f5cd2ead2c6569a564a04cd88d7b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6469f5cd2ead2c6569a564a04cd88d7b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6469f5cd2ead2c6569a564a04cd88d7b_JaffaCakes118
Size
68KB
MD5
6469f5cd2ead2c6569a564a04cd88d7b
SHA1
c9a7d88367fd9a8f4bc141c7d8953e6efd028349
SHA256
c96cc0ca68dd7634faec2f17bb2f2bf0f892d9a58c48c48ec8b6bf920eda6711
SHA512
6050594dbb75b101a587a3efa8f7a20349ec6b3325264911bcfc0261db80da651a42ef948586af959d985ac85d6b08e8deffe4785283ec6069fa2cf74c5af704
SSDEEP
1536:1zExMwCGQ2jpbkyBvbiR2hnW6TSD0nfCn2QLwoY:1I+wCGv1IyBvbi8W6OD0nQ2Qe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6469f5cd2ead2c6569a564a04cd88d7b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ