Outt
Sett
Behavioral task
behavioral1
Sample
4be09f7c74ea0129806b7fddd8836c98_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4be09f7c74ea0129806b7fddd8836c98_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4be09f7c74ea0129806b7fddd8836c98_JaffaCakes118
Size
71KB
MD5
4be09f7c74ea0129806b7fddd8836c98
SHA1
8ecd0a42f9519c094773dcc1c747c9fb51324ebe
SHA256
3527c985e35a1d715cd0ec735ccfd6c45499466134f879c7186b1d0d25f65d4c
SHA512
4376a4b1ffe2dac619ee701507a18781de9dca98f264306ad146d2792ed40493ba85cbcab0511f7a0b21438cfdd689d3596cfc452f862e30767254d1d82bd6cc
SSDEEP
1536:Bm1NGJVGNHNwLubnX7iEYJZ4BRhF8OKBIXRjI1bHEK8PLTA:kX0VAwL0X7iEJBRGB62EXLs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4be09f7c74ea0129806b7fddd8836c98_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ