Outt
Sett
Behavioral task
behavioral1
Sample
5f1641a9dcfe2a1a02924fe0efbeac62_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f1641a9dcfe2a1a02924fe0efbeac62_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f1641a9dcfe2a1a02924fe0efbeac62_JaffaCakes118
Size
72KB
MD5
5f1641a9dcfe2a1a02924fe0efbeac62
SHA1
5fc28c07569fa411af0ad197f1d8779170cb1f6f
SHA256
0ba33ff5aaca8197588cd51eda14ad3757ef0a58ba0246623fc8269fb8383884
SHA512
81cfc329849092a7c0ce686d22f5532b4d78dbd2fdf537c1bf2466318e63380eb4f895aa70e7e620bf19b2588e766bce592e5057863fe8af42150216564c9e31
SSDEEP
1536:V8O9Nn6RjriECY2kWkge2mM1/v4ibSnY5u/4cO097gmBx:2Oz6VWEtTW5e2ytlD797gAx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5f1641a9dcfe2a1a02924fe0efbeac62_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ