Outt
Sett
Behavioral task
behavioral1
Sample
e93fe760d6285b6eae0f28e82050bfd9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e93fe760d6285b6eae0f28e82050bfd9_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e93fe760d6285b6eae0f28e82050bfd9_JaffaCakes118
Size
50KB
MD5
e93fe760d6285b6eae0f28e82050bfd9
SHA1
cb52f956fdd38004ba2b26a681bfb8e037fc6dc0
SHA256
65c9eec96d16c392ad01437188c35e063d909aa4fdd2bb1b12c256e9a53e5fef
SHA512
4ca83fde28056f7b5310e535be31bebedc9b89c1f7eef370ea092a641f1d0a9c5b6e64694b9a0a61403a448a2369beba8007738fb3c28315d0e02d9562b13fbf
SSDEEP
1536:n7ZLNPp9pZBM1Bxe6mfpXS7K2H0db/Q9lNW4vcPo:7Zpp/BC7K2gsNPvR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e93fe760d6285b6eae0f28e82050bfd9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ