Outt
Sett
Behavioral task
behavioral1
Sample
665b6769b92a9d0bf4c56760ed431cc2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
665b6769b92a9d0bf4c56760ed431cc2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
665b6769b92a9d0bf4c56760ed431cc2_JaffaCakes118
Size
73KB
MD5
665b6769b92a9d0bf4c56760ed431cc2
SHA1
7bae40f613edac24b36df57fea3b611784542d73
SHA256
59f231dd7434f78022b5ebf741c232e137b5998096a30d1d0a11a8c4785c5501
SHA512
96630fc97edc1c21bb128469067e484b129ce79d4d383067d4d3e9e7bffcf5771e47e22616a62f2acf9839a33fce514e975ab1a9373f591734f0422c40716348
SSDEEP
1536:yHZ2dV8pbHNv2A5/BMn1el8pz4MIfjdA6f8CmJLlphQjpj8F0ggs:yH28pp5/BI0t+6EzphQlgF0U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
665b6769b92a9d0bf4c56760ed431cc2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ