Outt
Sett
Behavioral task
behavioral1
Sample
4120269fb2fe941b12041ff8b417911e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4120269fb2fe941b12041ff8b417911e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4120269fb2fe941b12041ff8b417911e_JaffaCakes118
Size
61KB
MD5
4120269fb2fe941b12041ff8b417911e
SHA1
35140347ed4d6224871e013acd4d9e2e895dfb1b
SHA256
a00f1d870188c046f7b7afe19238a0cf3d73d76cb5e46e42f8ca8c4357f4e58d
SHA512
c7957d46944e13f91c0e874c4baab6484cd21c95f22830507511f97aabb5b4784aca4588c0237cf1f746edf1f554290ee1c99cff15d63ac7c092ce47b3a96893
SSDEEP
1536:Bm1NGJVGwMgt+bxFh6eKs6HO2t6Rr36rx08sntsDu:kX0VNyfVQHmr3UL2si
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4120269fb2fe941b12041ff8b417911e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ