Outt
Sett
Behavioral task
behavioral1
Sample
5eddeb5460bd9fb086aefeca25719a87_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5eddeb5460bd9fb086aefeca25719a87_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5eddeb5460bd9fb086aefeca25719a87_JaffaCakes118
Size
66KB
MD5
5eddeb5460bd9fb086aefeca25719a87
SHA1
50bb700fc875df3031d9a0235596f5d32e5cd207
SHA256
2073750e2d9189688f665836c851199ab33f20820cb5946425c6febcbf7c4583
SHA512
a88a4f75b8496a1b23b6d845a3d22a8462defc8b54ae4bd35deaf2a1f45cc07e260d0ffcd73e3cf25295430e9a0f9809e94380e90c9978f474eb2dcb7c012d60
SSDEEP
1536:ob8Vwn/IdPQkIo2Dlw3qYwaDGKhx83v4bWLgJkt6VIQpbjat0:oz/IdPQkIrlw6YwaDGKL83v4WgHjat0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5eddeb5460bd9fb086aefeca25719a87_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ