Outt
Sett
Behavioral task
behavioral1
Sample
64cd128b972d568cc850a66fbd36bf1e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64cd128b972d568cc850a66fbd36bf1e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
64cd128b972d568cc850a66fbd36bf1e_JaffaCakes118
Size
61KB
MD5
64cd128b972d568cc850a66fbd36bf1e
SHA1
07f1ce879bc70e0647f7311545be16b95c799255
SHA256
d561a03eed0191c5cff00b12cc2d9cbc3f2d383fa7761f41809699e0e06a8e93
SHA512
9fae4a6c36b256d8e44141072264c00c714c3125c827a6f2fc4f2024bfb1d881ca4a75dd843021b0e47db9e336bcd8a05b2d93087d9c77f83d0cb498dff712b0
SSDEEP
1536:yl3E0TYeVQcXeuqKmLJ9OHC7rAaqRxPGreUd:E39FVQtuqKKE+OPGd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64cd128b972d568cc850a66fbd36bf1e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ