Outt
Sett
Behavioral task
behavioral1
Sample
66000b1a395395f97dc613e845a270cd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66000b1a395395f97dc613e845a270cd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66000b1a395395f97dc613e845a270cd_JaffaCakes118
Size
51KB
MD5
66000b1a395395f97dc613e845a270cd
SHA1
e3ef761294237f5d0879caaa54623633600aa214
SHA256
2012066c9f4550eb91769c32b77a58e64cc7b171a4f72209fd7e6fa498f45173
SHA512
9dc9fbc1121e9c1a8e9ea599199aed1b8e5b7ac3e1cd037e85cb2a1c37cba1ce711b6de891b077cb1a2c4b399c81bf4235625f084397883b63261cea1e89d0e5
SSDEEP
768:szM2xVVSd204y6uno+J2w9ZN2TepHqQVcHt1350MT2MWpe7zak3TW4jXSD7KrE4:V2b4gClwwZNvpHqQVO50MT2MWQPi4Wv0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66000b1a395395f97dc613e845a270cd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ