Outt
Sett
Behavioral task
behavioral1
Sample
6721386d5f2393d347e4a9122386a5b9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6721386d5f2393d347e4a9122386a5b9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6721386d5f2393d347e4a9122386a5b9_JaffaCakes118
Size
70KB
MD5
6721386d5f2393d347e4a9122386a5b9
SHA1
0ac043ea2bc93c68b2e171c4bd2815ab8f856807
SHA256
b58e10b16666732c4a85feb302ac8c795ff82874ebbe25c674425d5e4868c52a
SHA512
634a310223ace41e2b9f49e6e69bbf88e749a286b008eb08fde067e89f410fc1a6e2090c138621dec049084b2e4ba5778116ea8d6bce5ae611a5bb9a970d5dcf
SSDEEP
1536:23umoMtxdg4Ky+I9SD2O4PZWWnZjH9YUUMpjGL4z7zYu6v1Yn:CoMtxN+qSD2hduMpjJvI8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6721386d5f2393d347e4a9122386a5b9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ