Outt
Sett
Behavioral task
behavioral1
Sample
5ea2a844e18b7308dc44bf4197cb5cf9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ea2a844e18b7308dc44bf4197cb5cf9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ea2a844e18b7308dc44bf4197cb5cf9_JaffaCakes118
Size
58KB
MD5
5ea2a844e18b7308dc44bf4197cb5cf9
SHA1
1e5190fe56d70a349933ccf2e09db88546dedd37
SHA256
7bc5ab64213b763078af7fb5b3f00eaed93963bb0269e09a1f11dfb481f3a759
SHA512
23aa9f0648c61a11e805856c2ed4ac7076baf8638d2cafbadf3701351b64e0f70df0615bdddc4f6dd45aab369da9f7646947e0c2a5223f2238fa921d6695b96c
SSDEEP
1536:V2bTX5E3xLgcBHa10A5bzus8nuG2WsxFx63mRJ1BBUd:W7oL1A5+ZcWsDUE1Ed
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ea2a844e18b7308dc44bf4197cb5cf9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ