Outt
Sett
Behavioral task
behavioral1
Sample
f0c5ffa9587a455e9e39d6a87d7260a4_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f0c5ffa9587a455e9e39d6a87d7260a4_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f0c5ffa9587a455e9e39d6a87d7260a4_JaffaCakes118
Size
74KB
MD5
f0c5ffa9587a455e9e39d6a87d7260a4
SHA1
d5ddbb72209d4b16ba0ae7877c28376d67a9d7a6
SHA256
4e51cc8a5e6e1a0cbd360a64cdbc197cb4056958f0d7846a9fcc297c93529e6d
SHA512
8c0e5753e847ad663e8d588d27991acd4b27af2e6b8cd290c51d15af05afe86fc60fd6a464a5834d1202e7bef0b41151cef2c702d9c295c81f96d7b6923e0c17
SSDEEP
1536:mPO6KEVbsVP0gHX4zI2W6Xdtd2iTNE+36NK2TKlS3QHufTkeaTmIyAlW7v6S:cMEVbsVcKX4zfd9/TNx6NKBSgHdeiyAE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f0c5ffa9587a455e9e39d6a87d7260a4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ