Outt
Sett
Behavioral task
behavioral1
Sample
5e89464316aff9cd13d532c71143e9e4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e89464316aff9cd13d532c71143e9e4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5e89464316aff9cd13d532c71143e9e4_JaffaCakes118
Size
71KB
MD5
5e89464316aff9cd13d532c71143e9e4
SHA1
bd6f122f771bd35419eaed315d9da37f5ddaf18a
SHA256
505ada5fd9972537e164c3d97ea52f942b743812e41b1f87c753bdb5f86eb426
SHA512
34e5365f94326f0a292ec4c63231b81d79a7317a597326df70869ea2e8c9b1f1ee8895155cf44e5cd349d6ffec6f62840263970b63f7a2a78cf25398a8c01755
SSDEEP
768:56IRmOOuB8RhB2y5IoGSjG9RLgcbID6UaIneeXbIHW60gRoQJ5afz6806JmoAd2C:5jRmOyBH5KSYa2UeeB60oAm36MoPrsE8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5e89464316aff9cd13d532c71143e9e4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ