Outt
Sett
Behavioral task
behavioral1
Sample
656e16b5100b6704fa95f07bd19f5fae_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
656e16b5100b6704fa95f07bd19f5fae_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
656e16b5100b6704fa95f07bd19f5fae_JaffaCakes118
Size
72KB
MD5
656e16b5100b6704fa95f07bd19f5fae
SHA1
d56990a06de6db8e94d06562e833bbe637f01311
SHA256
247621d24d09ad6ba5641a4d31f50bfd0e2bdc3e1b4fb5591e9b2abe82d85cdc
SHA512
de3e741a6f3ccab5c2b61e75ece8b28d0df241884075b3563b43d89e8c81ae2a44032cbff50f2665c2a2870563a5a40118f0a1b3f66589ea145c6bb9340c373c
SSDEEP
1536:Bm1NGJVG+GSvh59LexusDaVzW+x1mQyBRRT9I:kX0VkSZbOiDx1HyBRRRI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
656e16b5100b6704fa95f07bd19f5fae_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ