Outt
Sett
Behavioral task
behavioral1
Sample
5c41c533577c1bc95ae4c25f3b31822d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c41c533577c1bc95ae4c25f3b31822d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5c41c533577c1bc95ae4c25f3b31822d_JaffaCakes118
Size
58KB
MD5
5c41c533577c1bc95ae4c25f3b31822d
SHA1
89834d6bb93f63cab34f4a1ff6125f95a6cc9a22
SHA256
9604478fe619a7837a33bf91ae46636d9730d40ec5ae08abc0be721fe9229431
SHA512
44c3a0fda1c7bf777c755ff8161d510434698ddf46467d7d8bd2f952a7e866f274f7258425110976936f6e74dd500cd866e34305d0ff5c18431be262fe5e050b
SSDEEP
1536:EGryO+/nSi7igAX7FHJ7A2AZv1+L1hGuiyo:EGrz+/S/PHJ7A2AZNU7o
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5c41c533577c1bc95ae4c25f3b31822d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ