Outt
Sett
Behavioral task
behavioral1
Sample
66d0493da447fbf692bbadb69ce9fe58_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66d0493da447fbf692bbadb69ce9fe58_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66d0493da447fbf692bbadb69ce9fe58_JaffaCakes118
Size
68KB
MD5
66d0493da447fbf692bbadb69ce9fe58
SHA1
bea5b24ab96deee31f3f98c7fd4c7fc92e562b85
SHA256
d19defb480c41b600db9e24473613becd2b975e2cfca3b563fdb1afe10bf95ca
SHA512
5d20339ad49faf409e78435b2f4af3254bdf060329c12f50ee6716cf0af7ddcea492819c618ac109e7eb25f55a37c26276982d572a0372f8ba6815b4731e3e5b
SSDEEP
1536:Bm1NGJVG55x9UUgfccYm2k+3Rgvs6Ci1ViIQeccUvT6zkq6r1E9:kX0VM5x9bYccYp3evSi1VBQeJkGkq6u9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66d0493da447fbf692bbadb69ce9fe58_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ