Outt
Sett
Behavioral task
behavioral1
Sample
66a85417c13a338de7a0b1caa16b9e85_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66a85417c13a338de7a0b1caa16b9e85_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66a85417c13a338de7a0b1caa16b9e85_JaffaCakes118
Size
56KB
MD5
66a85417c13a338de7a0b1caa16b9e85
SHA1
e8bab76e8a89b32058d7c6ecdc930d960bdd186d
SHA256
58553357a413b0bab6bf456a96d4147b4483e4b8daacb3d29726305e6bf6de76
SHA512
934c5c103671a75f655cb7bbc108a7cd9a52fcb4ad7b51b61425740d544a851748477a85a662955242acab6092df4fff217c94417f040f497580a579ee89a198
SSDEEP
1536:OBRVgrExucMteliLSbTSyKLbPjpJQKWKGFGKBk:ERRsYQyKPdJQDKGFGKi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66a85417c13a338de7a0b1caa16b9e85_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ