Outt
Sett
Behavioral task
behavioral1
Sample
e8b6ed5365e9517171d029147771f5a2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8b6ed5365e9517171d029147771f5a2_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e8b6ed5365e9517171d029147771f5a2_JaffaCakes118
Size
65KB
MD5
e8b6ed5365e9517171d029147771f5a2
SHA1
c877ab8d1ca15c5d994983e0764d0eabe2abac23
SHA256
5146fb0d092187ab7dad930032df289fa2af03cfb646286e70be3422d03bf392
SHA512
8bd1bcf381f70088e35a070a9a6632e52c5d684cf1ea0751764f056b5c867dc50382477d16e2780bbcfa20b7566485b858c39f91ef0c1119d0c8ce42faab9344
SSDEEP
1536:evLnUKA4XwPPvD7TUOknDCP8M87Y4EZNThDtpsz:MryP77TUPDCx87TgHpsz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e8b6ed5365e9517171d029147771f5a2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ