Outt
Sett
Behavioral task
behavioral1
Sample
67e6b005c493ad7aa2e6a18160287df6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
67e6b005c493ad7aa2e6a18160287df6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67e6b005c493ad7aa2e6a18160287df6_JaffaCakes118
Size
63KB
MD5
67e6b005c493ad7aa2e6a18160287df6
SHA1
577b3331217426c0798290046c6f80b72ceeb6ae
SHA256
72746f601c34c7fa68401fb923c5795c530c47f7e31829058ef77b1975678210
SHA512
008f6041fabc74fe444d70b06fced0a96652cd244b7ea5413f98b8750f02846a73072d15a5ef94defe51c226ba3fc80e5a9be31f822ef9aa5471363663a4b9e9
SSDEEP
1536:5jRmO6VgbP/3eK9hc+XYqVtPJMWfv89VTNg:xf6VoP/OK9pIqVhJvvKVTO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67e6b005c493ad7aa2e6a18160287df6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ