Outt
Sett
Behavioral task
behavioral1
Sample
f8a0d56010401e821fb363db93c342bb_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8a0d56010401e821fb363db93c342bb_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f8a0d56010401e821fb363db93c342bb_JaffaCakes118
Size
57KB
MD5
f8a0d56010401e821fb363db93c342bb
SHA1
5e0aa37629d4c972ddb1caecc2e986cc444c1262
SHA256
3ef33c64aaa74758b9fd0bf303cbbac240b8d28accc309fb0032aed27fa668f5
SHA512
81425cdae9e7919672471e51c851d2fe85bd90769e2e62c312c5178e818e6c82e7bad7d1d40d6074ddc6a01859375195f498aedd8dda8a3ba266f3a47c5df6d1
SSDEEP
1536:ev3BBDQ8dniUl0K1v8lWOLUzm8cvDu4p6l5pN0:ujDfdeipOLFPSbl5A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f8a0d56010401e821fb363db93c342bb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ