Outt
Sett
Behavioral task
behavioral1
Sample
5ed4c8e9acefe696b703ed6fc47997db_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ed4c8e9acefe696b703ed6fc47997db_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ed4c8e9acefe696b703ed6fc47997db_JaffaCakes118
Size
57KB
MD5
5ed4c8e9acefe696b703ed6fc47997db
SHA1
9a929c87c1e84844d09ab1c92dc0b0d966167f73
SHA256
2b0df65911f08a5214bff88d0f4058c5d1463d4d5e1a159d9c490c0c70b71d8c
SHA512
0c2ba55fcf20d62a554ef9b900c73526a2d45dca665c299364fd21b76d83aed4ceba0153e662a6f5fb297c3a4cecae071b280bb21d2e8cace74ae7e9c8d40f46
SSDEEP
1536:V2bm2IFRTaSG3vOxaIh4ShZmRqoiDs07Rf/7E5Zg:WsvlEGxDPhWqRX7E/g
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5ed4c8e9acefe696b703ed6fc47997db_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ