Outt
Sett
Behavioral task
behavioral1
Sample
4252fff9f1142708cd3907415188e699_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4252fff9f1142708cd3907415188e699_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
4252fff9f1142708cd3907415188e699_JaffaCakes118
Size
54KB
MD5
4252fff9f1142708cd3907415188e699
SHA1
3a201834e94710094dc5822850aa2e7fb8241f84
SHA256
19251ff0fe985214ffc5c727fc99519f2aed4a502deac07f67b13b1d3066b6c9
SHA512
bb1784fe8ee66e31fbc54a43efc945941c32398d7f2d19d78673d8f5ce719c14c82c370d0f1943dd1e3f8203062d8686cd4f2abc8b3cc78494d38517bed16f69
SSDEEP
1536:GQ3tfgXKR+Y5t0RvIvT40Bvk66DhHQDGZOul:VfgXKLURvIvT40BvADhHQSZOul
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4252fff9f1142708cd3907415188e699_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ