Outt
Sett
Behavioral task
behavioral1
Sample
4a1bf895b84545943d15f91be759e700_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a1bf895b84545943d15f91be759e700_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a1bf895b84545943d15f91be759e700_JaffaCakes118
Size
54KB
MD5
4a1bf895b84545943d15f91be759e700
SHA1
830baa86a94205ca93aeb2d323132af5bd15c91c
SHA256
27492b66e01b43d38a478e27058cff54782347e7a9cea4d9850730868fae0fe8
SHA512
6e2119d8f8426b68e38fb3771a5e5e1e24853c054c5265403e943f577a084f0956f9e6bda577a8fa60b00702abb1cfb6ece96353a551456c3193dedfcf74ee49
SSDEEP
768:Gx4m7JNSll3dTG++ACXCi/XxNX8plJjtMpPFa84O5dYes:Bm1NGJVGfXpxK7MHcO56es
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4a1bf895b84545943d15f91be759e700_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ