Outt
Sett
Behavioral task
behavioral1
Sample
5acda20cc64995b3421ea011f7856e8e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5acda20cc64995b3421ea011f7856e8e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5acda20cc64995b3421ea011f7856e8e_JaffaCakes118
Size
68KB
MD5
5acda20cc64995b3421ea011f7856e8e
SHA1
bd0dd33654a4e8a76968ff069061e5a63a0b965d
SHA256
09ea8bcc0f0d4269b1ec3f3a5cd7a6866aed40d62bea935bae3d39045e6c1d41
SHA512
750a7d8dbcc960fc61c2e27af85102935a4864285e60fdd5ff87ff35e3b6b14ee0c21f8438f4febcc1bf7d4ce45ae080e11801e341ee134ff6bc49d85edfc4c4
SSDEEP
1536:MhBRVgrExucMJSeeBKc3wQa2/fVO7YlTwp5toyLT+0fDsITr6r+:cRRsPSee8cgc/tOMVwnzLS07x6+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5acda20cc64995b3421ea011f7856e8e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ