Outt
Sett
Behavioral task
behavioral1
Sample
ea449f2fa67f3d0b6a51bd6003630d3f_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea449f2fa67f3d0b6a51bd6003630d3f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ea449f2fa67f3d0b6a51bd6003630d3f_JaffaCakes118
Size
63KB
MD5
ea449f2fa67f3d0b6a51bd6003630d3f
SHA1
13c7b6df883b26efe111060958662df0490762d9
SHA256
641f83e443bc5d1a211d382a6be61672a36985b5380588b27b06915aa2613e78
SHA512
68f19e3fbf87e352dc298c2e1e70b17c475bbefa73ea2b40d67d9f5b83b9a4e908e843eb692ad31acfed82d6338dbcd7f493b9fd0a7e1864a95db963e10fdb36
SSDEEP
1536:EGp2R3sv7b+Spd9XsqsyuAAR3BTQwYJ643bOAfr1l21Jsa:EGpF7hpd9XJAR3FT43bHMh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea449f2fa67f3d0b6a51bd6003630d3f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ