Outt
Sett
Behavioral task
behavioral1
Sample
5ba3bee190e872f46ea6e8965e17f2d6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ba3bee190e872f46ea6e8965e17f2d6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ba3bee190e872f46ea6e8965e17f2d6_JaffaCakes118
Size
62KB
MD5
5ba3bee190e872f46ea6e8965e17f2d6
SHA1
04a2c1227f39c49b0c83b0c4edf5e4046e83127d
SHA256
943660f987a52f91e2f828a4299651d71aee468ae79c90752adfb45ca97052c0
SHA512
0830199df02fc1959d512a243ff253d9e9ce8c22a82f1366ce554a109500b950da0df211534d9e61f242a524f3aa6deb4c24104f083c6a5a3a51b3cf77f371d0
SSDEEP
768:yuUr3ip/IHI7NQTvlgZj/U/nvNNrVIxYqgKmKCvslWFiAcU2H4tTc38WVJRNLREs:yl3E0TtgZLU/1NaY+TRMa3vRg2YW1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ba3bee190e872f46ea6e8965e17f2d6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ