Outt
Sett
Behavioral task
behavioral1
Sample
665250dd3c130f6060cb776ffdfc6918_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
665250dd3c130f6060cb776ffdfc6918_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
665250dd3c130f6060cb776ffdfc6918_JaffaCakes118
Size
66KB
MD5
665250dd3c130f6060cb776ffdfc6918
SHA1
c9d2c22ba6140128a943da8c037ffd82b11b958f
SHA256
65f34b7f9a1ec8539c25647d127d65a239bfd856d2f8d0531623d047e21d8881
SHA512
8d3c938d944d7a6c929b25013d89d108ae2bf55bcaddecebce98c9f42eeaa405a5d4c5910e0056f05a2a29ed829b2c1382fc2bc8d13e3d63119d1068d996b50f
SSDEEP
1536:jZIcCxR7EZXdI8K2dHlpN+1qnt56iuxxyHLBO81:x+pEzI32dB+o56TGO81
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
665250dd3c130f6060cb776ffdfc6918_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ