Outt
Sett
Behavioral task
behavioral1
Sample
46a7f08a6dd9cd35bf23b2296bb34fdc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
46a7f08a6dd9cd35bf23b2296bb34fdc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46a7f08a6dd9cd35bf23b2296bb34fdc_JaffaCakes118
Size
77KB
MD5
46a7f08a6dd9cd35bf23b2296bb34fdc
SHA1
f24bf9234951e2cecba78749e6452d7bbae95a4a
SHA256
7ceb736cd7f54ebba2f4d98c5f51b74e1a1dec94b94203613aebc132dee13fe8
SHA512
a205b262744d833f1cdd7f2c61222a41b527c9e946750b09a14f32574eb6b80129b3587d4a5b88e19901588b618751f8a6aab1f5b117b0208622c76dcafc0d05
SSDEEP
1536:Bm1NGJVGEEz/0NJZ8ggoM4mQTzNHCiIxtOkpD2liZbjSnJ/mQ+wH4W5T:kX0VYo+CM4xVHCxtO2+ESVmN+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
46a7f08a6dd9cd35bf23b2296bb34fdc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ