Outt
Sett
Behavioral task
behavioral1
Sample
e77cf82c51d6663429a44047818c540a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e77cf82c51d6663429a44047818c540a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e77cf82c51d6663429a44047818c540a_JaffaCakes118
Size
53KB
MD5
e77cf82c51d6663429a44047818c540a
SHA1
0d75dc02a3d07448b5b22b95a2ae2b6eb7bc29f7
SHA256
618f71ed19dcfad93ba346dc88afb69049cdc8c38d1cc9db1139cf2bf38b8c22
SHA512
d200abb688dc32fe1b1fa911e21d4c0d0fdcec4bd9b2f3ab892225d02c5b8f2102cf997ca36083ef024c1c4dae849c42b061ce4b35690600c8696cc698f12c0c
SSDEEP
1536:mPO6KEVbsVP0gTM1jUA6QveNWx9x8V8zlN3avFYUD:cMEVbsVcgMpkQveNWxP8SL3aB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e77cf82c51d6663429a44047818c540a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ