Outt
Sett
Behavioral task
behavioral1
Sample
ea656908b7ab9269233659a57a8061fa_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ea656908b7ab9269233659a57a8061fa_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ea656908b7ab9269233659a57a8061fa_JaffaCakes118
Size
49KB
MD5
ea656908b7ab9269233659a57a8061fa
SHA1
190ed4f6e36ca4e6d0c20972e2a6f6765849f3d7
SHA256
5796a2f1262f56dcbcbed9d27be017eb9f1e0c0f6522723c8a8030008a27cb27
SHA512
6fd156ea9c5f8ba77c6d0ddd691e2bdfb99132966a23f2d7fd81d0c6f543e2a19d77cfee3343515230bb2ae9471ad22cdb3e8bb42996d6608be177c8fbeeccc2
SSDEEP
1536:1zExMwCGQ2j/K4Tg/8HIIhP5/iqC6STRFVh:1I+wCGvrPTg0HIIPMh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea656908b7ab9269233659a57a8061fa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ