Outt
Sett
Behavioral task
behavioral1
Sample
4b3d8fc912a18608b9f85770fabf0024_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b3d8fc912a18608b9f85770fabf0024_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4b3d8fc912a18608b9f85770fabf0024_JaffaCakes118
Size
67KB
MD5
4b3d8fc912a18608b9f85770fabf0024
SHA1
6bcc32a4be266a14e6d82c572aba0503a0767658
SHA256
0e3ef9a282ce2ba62aa2721eb01516e174e82c50456dc7c0caf0594a3c63f971
SHA512
3f145e5c5066c04994e8a6c5cc5ef511cca74fa0bf71bd16da48a16c3213709010ebc03f0ad32bcaae5387a1e495a3ba6858b31336abcc0396e95a7e8098f730
SSDEEP
1536:anR3R7hgDMUOQc/apGgzC9TuA0DKpzSPeUf1sKyhfOL6M8mP24B:aRNhgWQyawgzClu3GbTTm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4b3d8fc912a18608b9f85770fabf0024_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ