Outt
Sett
Behavioral task
behavioral1
Sample
5a2995810ab8e80ff443cdca60a8b6cf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a2995810ab8e80ff443cdca60a8b6cf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5a2995810ab8e80ff443cdca60a8b6cf_JaffaCakes118
Size
49KB
MD5
5a2995810ab8e80ff443cdca60a8b6cf
SHA1
4fdab92f0c3a19498ae068beeb9f4e90f4622848
SHA256
1e3c1fb5dca381bae4bc6a8855f3176b69f0c7a0b42fc11503d27414eaa464ed
SHA512
a85115be9b86a6c7d062ed1fbeb4a214f5d2572ddcc2fa81ec8131e7d2cce0f26cc480aa8e2fac5c89086699db405066c10e7e4421a6e48292088be1b918aeb5
SSDEEP
768:GbvLDaaMact8Tw157ud20wHxTJC8x7ZMsOpBFsiU6J3FLE3rBW8wIUZbCh6F/DOl:evghuQ0ucsO+Va+ncbCIdtw7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5a2995810ab8e80ff443cdca60a8b6cf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ