Outt
Sett
Behavioral task
behavioral1
Sample
4149c464b69e6e34cd610c2ee44235f4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4149c464b69e6e34cd610c2ee44235f4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4149c464b69e6e34cd610c2ee44235f4_JaffaCakes118
Size
58KB
MD5
4149c464b69e6e34cd610c2ee44235f4
SHA1
e9669fb4c3d9cca77ba73b748882c89df804836c
SHA256
555ccc14ff4a463fafd350509e584d7570fbe332dd983a5098092022d0ec9627
SHA512
73a5897d1f02ec867e95e0d069c57864ba6aef489eea7b7efc855eb712eeacd02a74adb0187dec6b52b159b4ca8cc55557ca93421324af15a54bf458690134f6
SSDEEP
768:nbY4lGNdYW2yjJ+q+LjbpgfRuksTnH+U/DTd9AVbvGonsEB5WGfUIxvApHE+X:EGGNR2WeH/nd9AVbvGonsEVYH3X
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4149c464b69e6e34cd610c2ee44235f4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ