Outt
Sett
Behavioral task
behavioral1
Sample
5fa01eb0f0d95cd52c9c645df2cb2e31_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5fa01eb0f0d95cd52c9c645df2cb2e31_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5fa01eb0f0d95cd52c9c645df2cb2e31_JaffaCakes118
Size
58KB
MD5
5fa01eb0f0d95cd52c9c645df2cb2e31
SHA1
49fa6b6dba63c3af99285fea69890665274e43e6
SHA256
61c09171e4d4aca88bd977964b8a5c2a748edbe27ef0454d41838648572cb581
SHA512
719c50ff66de8c5adaa8f0c048850e6470f6ca19d2b38904e8f4f311cede9d43e86c2febc1c2a2ca19ba5428766c4169f5bcc4c9aa7b35c99e5b13e183db0690
SSDEEP
1536:5jRmOFxXG65dzeBnbj/Yor2wOjnM+Rxl/sbBy:xfDXG65wBnbTENnFRxl/sdy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5fa01eb0f0d95cd52c9c645df2cb2e31_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ