Outt
Sett
Behavioral task
behavioral1
Sample
5e0024a0a881f095b2031b005a401dfb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e0024a0a881f095b2031b005a401dfb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e0024a0a881f095b2031b005a401dfb_JaffaCakes118
Size
64KB
MD5
5e0024a0a881f095b2031b005a401dfb
SHA1
63c05f33dafd56341e85071cdce8899a2667d182
SHA256
2a2e934bfed995593d42f52dd743f12a9c236098f42f9bd9c05aead70c65a9df
SHA512
fc67b4ff92a86e6ee9a035d164ba7f958774054926ff53b91c0a43d4a5346d85efc50e820af5094701d276117ed219db413015d174cc390de6707500027e86cc
SSDEEP
1536:evkzdFhF1727iaYQ1KTwg/7ads4rCG6dh:XdFhF1OYQUp/7CCG67
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5e0024a0a881f095b2031b005a401dfb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ