Outt
Sett
Behavioral task
behavioral1
Sample
4c52d095cc4f966ca0239b066af3319a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c52d095cc4f966ca0239b066af3319a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c52d095cc4f966ca0239b066af3319a_JaffaCakes118
Size
69KB
MD5
4c52d095cc4f966ca0239b066af3319a
SHA1
d6ef2fe74e1f2bcd3ead152e9d3226f00b0a2aec
SHA256
1962f4cc1baaba41196ad0dfaec7c8eb62749d84d79898ff8d7d5e0ad0fd9aa6
SHA512
ecf4a689efbf287b9e0e4a3b136fc7efa4a4e7a0a6526c1e2c0aa0ef4dea227ea759ce77ce16e55e5a714cb1fb3ffcb479348f6b590544a02e0b201b8a86b8aa
SSDEEP
1536:n7ZLNPp9pZBMNLUdhsjkhpvrj3mWxCaHPrlbxgos8hEUMiqpXxF:7ZppMW1pv/XCENsD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4c52d095cc4f966ca0239b066af3319a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ