Outt
Sett
Behavioral task
behavioral1
Sample
4b8556b10d4522bd2777acb87cc129ac_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b8556b10d4522bd2777acb87cc129ac_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b8556b10d4522bd2777acb87cc129ac_JaffaCakes118
Size
69KB
MD5
4b8556b10d4522bd2777acb87cc129ac
SHA1
536391eae8a359c5fb7df0f0e720170b31bb7913
SHA256
07a86228e1446b515b3f3ff582a0199ec7c1ba9dbddca3ed8e154848d03fdae5
SHA512
40d6f8471df2c18320888f0c68cba943ff2bb0c6ceec2286c3f3c5d57e1a4643c41d57272fadfa6457c64a27bd01df6c7fbfa07706964c1f066a0f4fc7db7cb7
SSDEEP
1536:mPO6KEVbsVP0gRzwZ0WLP6jYCXXG5fH0z/XB3k7OX3pvnZ7aVtJ6:cMEVbsVcIsD8znGfQ/RRnrstJ6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4b8556b10d4522bd2777acb87cc129ac_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ