Outt
Sett
Behavioral task
behavioral1
Sample
e10a00b560e59f8dbfc3322fdb539378_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e10a00b560e59f8dbfc3322fdb539378_JaffaCakes118
Size
70KB
MD5
e10a00b560e59f8dbfc3322fdb539378
SHA1
0fd71cbfd8cc6d655748583f4f99561ae2494b2f
SHA256
4909fdc0d43a3e1facfbaa68eea6ce5425b765a86f590841e7eb7e61c8b65ade
SHA512
e37e5a94b2745803cb0971b5c74274aab283c38b05b2f094b51d7a939e30012492deff7a0a7461feb21ba26e77c8305c8aac2403bf9e49c78b9bbd04fbd4d7c7
SSDEEP
1536:mPO6KEVbsVP0geLlp1nB/7QiPzSNtiPZRJJkSXzLEVJ/BbWmCv2O:cMEVbsVcLRV7xzwt8ZRJJTGKmCv2O
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e10a00b560e59f8dbfc3322fdb539378_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ