Outt
Sett
Behavioral task
behavioral1
Sample
5cfd239ac020456b9abddbdebdbbdb72_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5cfd239ac020456b9abddbdebdbbdb72_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5cfd239ac020456b9abddbdebdbbdb72_JaffaCakes118
Size
52KB
MD5
5cfd239ac020456b9abddbdebdbbdb72
SHA1
0c2fe8d3a585c41834fe2ee277b65ba0abf5794c
SHA256
1eb4a9577fc8ad0b0c03b0a2fe9faf5989ade53439ee7c1a2e589c0b272c8326
SHA512
d6741b0cb6b737bd699acb466b718ac35afaef0c00b9882718a2bdbadc9a8f160cb5e4d73c624cf6b71f14d4713f887bdbc2998ae07cb2667bfcb9d0a89f88a1
SSDEEP
768:nbY4lhLasGAZtCddsRTQvf9CJvu2GUbW3WWX0B/Ykdm2b9iNbhivc:EGgsxZtCwR8v1uv+UimY0wexRiCk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5cfd239ac020456b9abddbdebdbbdb72_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ