Outt
Sett
Behavioral task
behavioral1
Sample
4c6ab013c65d5f95be1492e01ae043f2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c6ab013c65d5f95be1492e01ae043f2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4c6ab013c65d5f95be1492e01ae043f2_JaffaCakes118
Size
74KB
MD5
4c6ab013c65d5f95be1492e01ae043f2
SHA1
0d120e7ddcf9e5e2a0d9e20ea4b939116ae23bbf
SHA256
02ca1c3fb3b907765fd87f1c22f05647176fddef3740aab01a5ec7a542eb1edf
SHA512
23ef928174e92b7302d5a6625ea315fe72693226df59e48a27c03e62620f6bbe29a15ba22970006fbdd2096a5dcc1409e7917bd126ecabb9c37e03f7f07b06b9
SSDEEP
1536:anRrREX09igMVClgKbV0KFlq9/vyF0/Z72BrP7pSGudCU:aR9EXzgSClgKZ0KGZ6F0/9Yr7pSGu8U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4c6ab013c65d5f95be1492e01ae043f2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ