Outt
Sett
Behavioral task
behavioral1
Sample
4d0659ee394c70ac7f8df920adb27fd9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d0659ee394c70ac7f8df920adb27fd9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d0659ee394c70ac7f8df920adb27fd9_JaffaCakes118
Size
71KB
MD5
4d0659ee394c70ac7f8df920adb27fd9
SHA1
53ce258c88dd1b669ce72f82a14762f75ea3c6f5
SHA256
10493af83030ca1d6f534d48d11a3520ef238f6c46baf0387dbe67ff89bdf6e6
SHA512
5e98c6de9948b1a09228c6d40e0fd9c8a39de82a7bf5f30abd1f9e69852fbeaf9b83c839169920930a632bbb0a94ef22991a8f47ecec5b737c32dda6f25dc79d
SSDEEP
1536:1zExMwCGQ2jI/dD/IEca8/Amd3e1YtfSVuFH86vk75seByz:1I+wCGv0/Jhca8xdu1ifSgFHPvk+eByz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d0659ee394c70ac7f8df920adb27fd9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ