Outt
Sett
Behavioral task
behavioral1
Sample
eb34f3f7a3b30acbeb26ecc4c5f1255c_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
eb34f3f7a3b30acbeb26ecc4c5f1255c_JaffaCakes118.dll
Resource
win10v2004-20240319-en
Target
eb34f3f7a3b30acbeb26ecc4c5f1255c_JaffaCakes118
Size
63KB
MD5
eb34f3f7a3b30acbeb26ecc4c5f1255c
SHA1
a223439a113b5fd8a009d1d1c62e5bf9021a86e0
SHA256
4eac743759a73459cc7e6d6e95d12abbe0aaa5008c52e65768673b908107aab7
SHA512
b3c3315d632d2d95856319fd9502510fb7ec57ea1b10eb4d0f215a627c634c2cffbaac11ded4622c8c62e6f320da6fcbc4f432450319ced6515430165b9adebb
SSDEEP
1536:5jRmOKmeWI5Gc5j6itgvMk03XrjZ3H290i/hWO8CeC7v7XCshi5G:xfKeIcc5jbtgvMpnrj0hf8Cl7v7Hhi5G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb34f3f7a3b30acbeb26ecc4c5f1255c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ