Outt
Sett
Behavioral task
behavioral1
Sample
4125ce4e09d5b7d95b3493343b4c7d95_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4125ce4e09d5b7d95b3493343b4c7d95_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4125ce4e09d5b7d95b3493343b4c7d95_JaffaCakes118
Size
64KB
MD5
4125ce4e09d5b7d95b3493343b4c7d95
SHA1
4872c802d7d4589448597ac7dfc3370b0eba6039
SHA256
03395d2d89b94129ad24040291ce21fc58b0adc19b30732eaa5bebf3dbf18f6a
SHA512
0a69ff898a3c443c3ec2d0f9806583c17d62f7d92ef31dfa1a7ce713132ea102433433518c65cd3f9ebc87592c34dfd5f56809966fd264c9abff1fabbcaf3873
SSDEEP
1536:soa1lMWifJGJTqA2gfXjGIdcfHIZOPm4gQSvhzJk:SMWikJT5rlNOPGJG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4125ce4e09d5b7d95b3493343b4c7d95_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ