Outt
Sett
Behavioral task
behavioral1
Sample
5cce900eefc9d90c8a00ad412fab069e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5cce900eefc9d90c8a00ad412fab069e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cce900eefc9d90c8a00ad412fab069e_JaffaCakes118
Size
76KB
MD5
5cce900eefc9d90c8a00ad412fab069e
SHA1
8a0b20cc31605b77e28c3af7c600258b2b9dc308
SHA256
2be597de37cdc15d43dedc152bb3f7365ed023e937254ef18bbfbae64738f4eb
SHA512
e5b0d44b9587f96ab51d3949a0feef90115d74d11d2a5f85e4e9ce2c438cf7fed468c636bde3d14c05b2e44d5252ca3509fd7199af90d61b7c4f8d1736e6026b
SSDEEP
1536:1zExMwCGQ2jGqbB7JccslRVtN9oK6UnqOu+xUEr5+MZrzhJQxR8E70YJ:1I+wCGvK4cNlRA+xpr5+MZAx/79
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5cce900eefc9d90c8a00ad412fab069e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ