Outt
Sett
Behavioral task
behavioral1
Sample
fa195c89daea5d9779cd7535a79275bd_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa195c89daea5d9779cd7535a79275bd_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa195c89daea5d9779cd7535a79275bd_JaffaCakes118
Size
59KB
MD5
fa195c89daea5d9779cd7535a79275bd
SHA1
f2ca101642fd422af61d1a0a1d3f9f1382eeed3e
SHA256
2d27ab500f0ea457d311619160ca3884a7982ab7dbe7aba5635e5aae0041d82f
SHA512
33049d3cb35852619afbe7eb00026b8214ac7d3e9b697c6aacd5aca61ffb8773380f6990042d7017faa663b3580201d03b12a8863de5d617ea5994903b77e19c
SSDEEP
1536:1zExMwCGQ2jE+ufkoP/2XGIKszrZ1xL72aSCMB5e:1I+wCGvQHMoG2I1VJtMPe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa195c89daea5d9779cd7535a79275bd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ