Outt
Sett
Behavioral task
behavioral1
Sample
46f1a0343badcfe900f0b7c1cd1a36fb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46f1a0343badcfe900f0b7c1cd1a36fb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
46f1a0343badcfe900f0b7c1cd1a36fb_JaffaCakes118
Size
61KB
MD5
46f1a0343badcfe900f0b7c1cd1a36fb
SHA1
4a4beb39a0d347448920f75483ee11bbe1c90670
SHA256
2e94d933a77b03de9cdb541c8ac84cc105e6b17fc900befe229c00f24b20c952
SHA512
a48393b2d379e636ea8038c30b6ae2a54f48b8a80cae0642cf4c11d2dcf63d50439cda1f8fed10739b0eeab7a70e600f3d49152beb3ed0b33e597eff302d1290
SSDEEP
1536:yl3E0TKQufSVYzCSd1TRFfKbm6SWoxBqr0:E39epbzTd1TRFfF6oc0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
46f1a0343badcfe900f0b7c1cd1a36fb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ