Outt
Sett
Behavioral task
behavioral1
Sample
66265e7a6c677388905ffe88aa9a2364_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66265e7a6c677388905ffe88aa9a2364_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66265e7a6c677388905ffe88aa9a2364_JaffaCakes118
Size
63KB
MD5
66265e7a6c677388905ffe88aa9a2364
SHA1
f2ab485c1fa2958fd648d68344a5bc5330bb81ec
SHA256
3bfca4adf3e14be7f9b81529c9c1ed8804ec10cf8d2b15ab61e5cc4950e14f02
SHA512
6e33c2c431e7325654b6066f707467ef283cbd70d9ad01f147913d0694031d3d28b2ca24d4c94f2d5989cc3b0ee63fbaa32d75f94857d3a47cb5a2d903c050e9
SSDEEP
1536:2LOJMXV6auAs5kl44L6y+Y8RjNWhbxrGKu7FTTkDbh:2rk7R5kllLV8ihbxrGKUVk/h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66265e7a6c677388905ffe88aa9a2364_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ