Outt
Sett
Behavioral task
behavioral1
Sample
e854e8deb2876f6f9a409e8e7893281d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e854e8deb2876f6f9a409e8e7893281d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e854e8deb2876f6f9a409e8e7893281d_JaffaCakes118
Size
66KB
MD5
e854e8deb2876f6f9a409e8e7893281d
SHA1
0e45a37433af569b9dab14e26563905056680608
SHA256
76b1ba0c73c3572edc7044871471ac5fe1e890938cf219cd138c784d772d68ff
SHA512
852ae17501b82ad69c28ffb406b1123d2159f66b82b88a7cf318f50b85a8c2d6f60e6ce2e4884b775f217d56388cac9962912e654a90e2fec0c2de91a73c0219
SSDEEP
1536:RVaqFfqkhVM0Ff2gLrMxZCLrpaXGkLjO1PGWbO:TawHhr8gXMaf0zLmfi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e854e8deb2876f6f9a409e8e7893281d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ