Outt
Sett
Behavioral task
behavioral1
Sample
66b6d099f54e09f8f58a3b658d6fd196_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66b6d099f54e09f8f58a3b658d6fd196_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66b6d099f54e09f8f58a3b658d6fd196_JaffaCakes118
Size
85KB
MD5
66b6d099f54e09f8f58a3b658d6fd196
SHA1
073c7d067e154d66d51d9d0a29ee8d0c69bba01a
SHA256
7317ea37c8013f25c6154c6947dbe46271f8156329d271b853ca3bb6327e2970
SHA512
e372cd61ccd584baf4bf11978cb09d3f11485a8a7beb3b7d5a94a87807c014607eb3be725040f11ecd02506120cf21574a28ef8f1a247474cef45f66b178966e
SSDEEP
1536:agF0eiyUcbDbr2lh1hPjExdVt1h1oK9We6J6H5l3ReVgd+Y/DY/uJqj:t2yF2lhzPwP31oMZk6H5l3RpV/Drqj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66b6d099f54e09f8f58a3b658d6fd196_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ