Outt
Sett
Behavioral task
behavioral1
Sample
67a8d5f402c06da1f386d318e031244b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67a8d5f402c06da1f386d318e031244b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67a8d5f402c06da1f386d318e031244b_JaffaCakes118
Size
73KB
MD5
67a8d5f402c06da1f386d318e031244b
SHA1
5c49164ff1a6be9bfa56533aa32986ddd4171f18
SHA256
0cda1702c4afc0dbc58878d6723d934a881b86b9b61b6a9eef229550085cad86
SHA512
ededc7b808a9b78c4996667122acbf98633122e5446201bb769c87c672d0716964d51a8fe451a912a0fbbb149ed6042bd446dcc5e3653b26d6816b65fc049e9a
SSDEEP
1536:qmmMmT/dGdd6u3rqgoPWapcjgEoRpAbjdGpK0H7Eb/d4KVs4x1SU:QMi/dGD7qgoP4jRoRgjYpKVVsxU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67a8d5f402c06da1f386d318e031244b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ