Outt
Sett
Behavioral task
behavioral1
Sample
6602f1d8f460f1b55c454b1c87b9b508_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6602f1d8f460f1b55c454b1c87b9b508_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6602f1d8f460f1b55c454b1c87b9b508_JaffaCakes118
Size
49KB
MD5
6602f1d8f460f1b55c454b1c87b9b508
SHA1
81157d76d55f39654e8f12d3fd177e5cd12551db
SHA256
29aa0fc90f9675b0e30c05071444fc6c92adb4fe385bf5bfff555b8310fa0c2a
SHA512
bf1df1d43f996d6bcb6673315b3b95f10c780e1d769e1f905cd5e4520395d69c4c9fd873741fd45cf11162a20cc0c50284f2164c9f4c953b7203645f41811340
SSDEEP
768:1zExMf4sJGHw2jnnTPT8ES9dIfwanHBJCWbpYm+JXSjz/EYrXFt5/w:1zExMwCGQ2jjYgfwqXj2m+JUdTS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6602f1d8f460f1b55c454b1c87b9b508_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ