Outt
Sett
Behavioral task
behavioral1
Sample
4ab9b06ac63bae8a15b24b410b8ca901_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ab9b06ac63bae8a15b24b410b8ca901_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ab9b06ac63bae8a15b24b410b8ca901_JaffaCakes118
Size
80KB
MD5
4ab9b06ac63bae8a15b24b410b8ca901
SHA1
f4500d19e35ce64df34b05033bb2b083d95d1d95
SHA256
02f177d60e3b8a5b8d52fb6e14a56a5c78b4f98c4eb3e3fba15264a53fcec6d0
SHA512
0a32d81746d0b691cffdf3124ca2af944e84e46ec3b3a85e075d0de190488faef576b26babad9518fb9c1db695aedda12d1f7f2c65a46705a1fc6cfaee9983cf
SSDEEP
1536:n7ZLNPp9pZBMYBpdoEmjIRU90mbWw4EwtWd4Oxa6P9k840+4S3iCckQIXk:7ZpppoEmMRUu2Asd4Otk8p+4Si8Xk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4ab9b06ac63bae8a15b24b410b8ca901_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ