Outt
Sett
Behavioral task
behavioral1
Sample
669b329951e5f2a8b24554609f4ddf6a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
669b329951e5f2a8b24554609f4ddf6a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
669b329951e5f2a8b24554609f4ddf6a_JaffaCakes118
Size
61KB
MD5
669b329951e5f2a8b24554609f4ddf6a
SHA1
15e30a5c718862f8027b174781ab9f57adcdf724
SHA256
2f5d6910221f2608021369af324d7d0bc8e33738649eb9066d6d4dc7e1a8e371
SHA512
bfe2ba28a9f712584d47f469761840e886e34d19b01e8cdce5a3770f66b3324a1631b31a23a56e19e8f564521b765471428073d10ad6f07486ba4eb240717606
SSDEEP
1536:EGK/+Lc07ZXV2Hl1CL9ZXNHDAgTkGuF9bfNL2KFc:EGYm7ZXV2HlUL9ZXNy5Fl1L2h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
669b329951e5f2a8b24554609f4ddf6a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ