Outt
Sett
Behavioral task
behavioral1
Sample
66f14e8c22d99a22255417331fde8d1a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66f14e8c22d99a22255417331fde8d1a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
66f14e8c22d99a22255417331fde8d1a_JaffaCakes118
Size
53KB
MD5
66f14e8c22d99a22255417331fde8d1a
SHA1
6b4104217d52b20f5872b2e35dc05c83a9c1bcec
SHA256
21b5dbe8e8e449049798c3b9dcae1a3f6dad4b01bbb016b89e034cc7509150e1
SHA512
ec281ade0fac4ad73ffdb58c95e670529a77fb2453b25633381f7746682b3820caa5da0cac90e7952cd58b0bcb2701dbed358d82e07246daad11c4cf2c0df50f
SSDEEP
1536:V2bq9nGwFosVPZ205Dq8zF26J2L8wM5AD8P:Wq4wFoSq8zFf0M5S8P
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
66f14e8c22d99a22255417331fde8d1a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ