Outt
Sett
Behavioral task
behavioral1
Sample
66a6329cc11396aef67fcc52dc810827_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66a6329cc11396aef67fcc52dc810827_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66a6329cc11396aef67fcc52dc810827_JaffaCakes118
Size
71KB
MD5
66a6329cc11396aef67fcc52dc810827
SHA1
9dd6c631ea9f1e1601782de74add2b75839b8595
SHA256
d9c012d19373801a94f2659cdb75d77ab809f0c5f9c259942a0df433757fac2a
SHA512
a0e183687134d5f4900cc15f1f35f1e5d6789d5bed5111559e35add0f7bb0a018af0bfe459dcb67e6367537e821c8ff08af0cda9571032284b87378af1dd9da5
SSDEEP
1536:agF0eiyUcb2KYQc3B7SazBehSJWH8bxkaLXXBlcq7E0d1Wi1x:t2yF9dW1xe8b+aLHBlcad1x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66a6329cc11396aef67fcc52dc810827_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ