Outt
Sett
Behavioral task
behavioral1
Sample
67f626daf48cda4872f38d41a163c561_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67f626daf48cda4872f38d41a163c561_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
67f626daf48cda4872f38d41a163c561_JaffaCakes118
Size
68KB
MD5
67f626daf48cda4872f38d41a163c561
SHA1
57b231c4b6c7241ee9f3554dfc5ab33ad14fb5db
SHA256
c2a48fdbea813a7fcdaec6630d6b65a09627b12483ef95a43f2d9a94b4f8ec49
SHA512
4fe5cc9c36f0041b739e342fb1507d4111008ac6cb587bc2881cd6d7bfefa71c603459f177f58ab350fdce0eee24ffeffa5b25d44aeaaaf3948a7ef7cdd746e4
SSDEEP
1536:MhBRVgrExucMIQEcoPm1yXlX9lLz/YBm83LPjwzWGbJuxSRcG:cRRs++oPm1yXlXXLz/ePUzbbJrT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
67f626daf48cda4872f38d41a163c561_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ