Outt
Sett
Behavioral task
behavioral1
Sample
f5c6f646032a8211d50645b73ad642ec_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5c6f646032a8211d50645b73ad642ec_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f5c6f646032a8211d50645b73ad642ec_JaffaCakes118
Size
61KB
MD5
f5c6f646032a8211d50645b73ad642ec
SHA1
38b0844a03b04c958b6eaf4e5a3530aded5c339e
SHA256
3a35b98e7a1015ce70bca3952830185575f5a51ada857e745b15ecd10b8a2a5a
SHA512
57b5c8e21f2c00e9d490ea3614bb1ee6744caac86496eefa099425656910c3ea07b2f927ab75c787059ce9bd470603c73b0a01d5c769804170797e1dee085c88
SSDEEP
1536:agF0eiyUcb70ubEvI6DpINakZuWDF9xo5WO:t2yF0ubEQ6YOWD3S5R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5c6f646032a8211d50645b73ad642ec_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ