Outt
Sett
Behavioral task
behavioral1
Sample
fc2eafd8dc0982c5f741a6c850f47cda_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fc2eafd8dc0982c5f741a6c850f47cda_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fc2eafd8dc0982c5f741a6c850f47cda_JaffaCakes118
Size
67KB
MD5
fc2eafd8dc0982c5f741a6c850f47cda
SHA1
0be1c25727ca203713be9a7ffdd91791ee2db099
SHA256
54cfb02348ea23e0b6d8694eed0f9dae1ae8399b4337bd1cc6d0144af1950e28
SHA512
f196170570d3f65396db6c7dbc9613ead8887bd42b92e19431b90fb24d21f7c1ee999e1139851e5b20917626e42f98d381010c027fdd461590cb1016c6e50c38
SSDEEP
1536:evyWGSbEnBDckevY74FZJxYyFxHFFikl8Xulj3RW2+KuDI:ibEnBFevY74VxjF5e69oI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc2eafd8dc0982c5f741a6c850f47cda_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ