Outt
Sett
Behavioral task
behavioral1
Sample
4704233e50ec71500734c78c2a9216cd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4704233e50ec71500734c78c2a9216cd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4704233e50ec71500734c78c2a9216cd_JaffaCakes118
Size
64KB
MD5
4704233e50ec71500734c78c2a9216cd
SHA1
31b0f7cf9b0726256be0b6def3329735b91818a0
SHA256
692eca474c193a969051f1d7d618ecc082d2ec34bce5bf95121d9f044df549a2
SHA512
07d6e17e8085d49c45b12991f284a9d2de041ef7cd78d52042de9bd3e1d028ca72eccde5fc4af8a967b6cf9d860517f17b19a6b628d8cbbce4dafc1df062e749
SSDEEP
1536:ob8Vwn/T9kWRSZVCxG6WaDGNfYhwt80fuIqTfSTQchK+Fh:oz/TWgSZVCk6WCGHtT3qTfSlDh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4704233e50ec71500734c78c2a9216cd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ