Outt
Sett
Behavioral task
behavioral1
Sample
665e79d7845f667e9c2713dd3aa3dde8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
665e79d7845f667e9c2713dd3aa3dde8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
665e79d7845f667e9c2713dd3aa3dde8_JaffaCakes118
Size
68KB
MD5
665e79d7845f667e9c2713dd3aa3dde8
SHA1
2a2794836939c2d4ff2ab1d5c0750a4829307b41
SHA256
833cada6f42a7b70c392554f807bfd60993980883b867afa14eb04575a51c002
SHA512
2003d66698d38992fe4083adb9ce386e75940d090d83a5b5c4c4651d794621ae8e9180b46731ea81369698d4ee200bc9061cfd71aa313e882a717ed193835940
SSDEEP
1536:V2bmUZ6SX01uwpYl82kQC6HKkr2/hxEUP74K7o4Tn:WmUBXc7SfkaKkr2/hxOK0U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
665e79d7845f667e9c2713dd3aa3dde8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ