Outt
Sett
Behavioral task
behavioral1
Sample
657232eb7e2e65f5e9b5e101cc84478b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
657232eb7e2e65f5e9b5e101cc84478b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
657232eb7e2e65f5e9b5e101cc84478b_JaffaCakes118
Size
63KB
MD5
657232eb7e2e65f5e9b5e101cc84478b
SHA1
c0c9553fb15e2531382c34bfe024f817b0114247
SHA256
bc63e07c2f0c44f726d38a180bb57ccdcf60a03e5acde44ccf29bfbd5b9dfb8f
SHA512
a3d77bc529c951b0e32921c0bf22411935ed45b182e90412cac5b3c44ae45cb3356dacae287dc8b285e03a42f707b1f92fef6bc6e38d46069960fe76811c2032
SSDEEP
1536:APqmOCbga/61ZktROv7ixFdeH5HHYCv8c6kb4sXu:cqmAa/paMFdSx4Cv8crbxXu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
657232eb7e2e65f5e9b5e101cc84478b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ