Outt
Sett
Behavioral task
behavioral1
Sample
6686707771a7715fd4634d9d5ae4aa8c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6686707771a7715fd4634d9d5ae4aa8c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6686707771a7715fd4634d9d5ae4aa8c_JaffaCakes118
Size
66KB
MD5
6686707771a7715fd4634d9d5ae4aa8c
SHA1
f79638e3235955ec7796aa9018307975f3095a10
SHA256
903a3527bd23b446946954517ef96f2d60964b44d9994d04b54a1e135a22e6d5
SHA512
72d98b108aff042b4e0281f8d922a6ae6f1d8a9fdf84be3552d347ca6f34519eb8790e0e7c959891deb295e66b25a0db18e57fd99345d1020dcb70dc8d211ccc
SSDEEP
1536:soa1lMWidIrmqptdigN7pX+JkAlg8XyHTxIq:SMWiIN79+JPgcytIq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6686707771a7715fd4634d9d5ae4aa8c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ