Outt
Sett
Behavioral task
behavioral1
Sample
4c30dff4acdc9c46bbb364d20b093944_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c30dff4acdc9c46bbb364d20b093944_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c30dff4acdc9c46bbb364d20b093944_JaffaCakes118
Size
72KB
MD5
4c30dff4acdc9c46bbb364d20b093944
SHA1
bced4e1e6f1831048df51d24038c265ebb4df2d4
SHA256
2d29b97a15293bcdaaa6a56b1fce91e98c7aacff03dcb6bf5b3f5a2ef163d122
SHA512
a95d496f7316d8554fc7cccf3ea02f63b47eb997bc57eb9bc710776bb63f83e2da4e1e50875e04c179c26ff50b7fa27ac63486a8917c297a7e5d0043c66561c9
SSDEEP
1536:Bm1NGJVG05/WePt1G2HFaoaURDEWpcdJXk9KTbMv9f:kX0VvsePt1GSaoaUWQygKUV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4c30dff4acdc9c46bbb364d20b093944_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ