Outt
Sett
Behavioral task
behavioral1
Sample
4ceb54cd5996387eeccdc9657af35bc4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4ceb54cd5996387eeccdc9657af35bc4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4ceb54cd5996387eeccdc9657af35bc4_JaffaCakes118
Size
52KB
MD5
4ceb54cd5996387eeccdc9657af35bc4
SHA1
48eb45b00cbdf3c203345b11b21a59386cf6b528
SHA256
0db32b76baf5cf1fef94c574dca4c5a52a32ae74866f56daa8c4e0cf851b7348
SHA512
2986b5537354f770305674150f49522a0eacd9b36f7d23bed1a8de79e695fbc82b427b1b80f1bafa23679a8b2a68792b86f04abc84fcd61f3efb4d6c57cd8671
SSDEEP
768:1zExMf4sJGHw2jnOKxkFcbYP+oxEP92HCUAJ9hqe9VFihQW1FgVTiSuaouJhvcsJ:1zExMwCGQ2jBkLeP92pqLKtkjPLLFOu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4ceb54cd5996387eeccdc9657af35bc4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ