Outt
Sett
Behavioral task
behavioral1
Sample
46b816cb33acd163ff6ef380f0655d5d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46b816cb33acd163ff6ef380f0655d5d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46b816cb33acd163ff6ef380f0655d5d_JaffaCakes118
Size
58KB
MD5
46b816cb33acd163ff6ef380f0655d5d
SHA1
bc76a3c76b21864bdb0acaa51ae5c5c3f2e1d89f
SHA256
6260443c33a44ad84e216f7ab74ba00abec24ae6539ad3ca24228beba5238e2e
SHA512
cd7eb184a363dc9bd2a102c06eb70bbf193e63bfbb1ccd2ba6304a7fb5aec0323a1483bd81825d4e122af7eeac532493f008cb6c9a1f2a9dc6e6ad367918c003
SSDEEP
768:Gx4m7JNSll3dTG+D6KwQ4WmsLTP51EtzmNoVYegrydMN7TOCtIbgRuF:Bm1NGJVGvDWmsLTYtuoVYlacIXF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
46b816cb33acd163ff6ef380f0655d5d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ