Outt
Sett
Behavioral task
behavioral1
Sample
6715f4d370d446f339ab395de5a95e99_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6715f4d370d446f339ab395de5a95e99_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6715f4d370d446f339ab395de5a95e99_JaffaCakes118
Size
80KB
MD5
6715f4d370d446f339ab395de5a95e99
SHA1
29758f927424bf4293e7a7cb4c3f1a8c69134f58
SHA256
be2a5539e9a9723f8b5459707f669cb50373bb5376dad4ff543adc424d4155a6
SHA512
89c6f4804737ab77cbe6316e4242d1010fce338280130a47bac6a538912b8f10238f21f0d8d41e5d11ed27aa9a74389303a33e18550af2280ad742b867665278
SSDEEP
1536:yl3E0TNVFfdUlS02t+iXR08emUwiIKOpEl4dGs56FqUf5umSG:E39JnfLN8PwiI7M4dGsQqUjr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6715f4d370d446f339ab395de5a95e99_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ