Outt
Sett
Behavioral task
behavioral1
Sample
5eed0f8bf47ff37506a862d1fa9e38d5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5eed0f8bf47ff37506a862d1fa9e38d5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5eed0f8bf47ff37506a862d1fa9e38d5_JaffaCakes118
Size
46KB
MD5
5eed0f8bf47ff37506a862d1fa9e38d5
SHA1
e4158790b3ba3c7119b283bfede4a87ace31516d
SHA256
31cf6861134ac52d8635b048cd06b1e8af5485adfd11b2ed9e571c41216e4f1a
SHA512
897926e6543d53b860fbef484ee3cf27677ab5e35161beb2ed0be55fe3076d3e6793441052999a2a7620b0006680b3e2fd2db61a5c1bca4b306b827f4b0f4baf
SSDEEP
768:56IRmOOu1j+F+eJwJCX++SRWLzXADf63B85K8DPQl:5jRmOFSgeJwIO+o4wDfqCRru
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5eed0f8bf47ff37506a862d1fa9e38d5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ