Outt
Sett
Behavioral task
behavioral1
Sample
4d5b54c102100df4cbdc2e4d5cc8b40f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d5b54c102100df4cbdc2e4d5cc8b40f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d5b54c102100df4cbdc2e4d5cc8b40f_JaffaCakes118
Size
78KB
MD5
4d5b54c102100df4cbdc2e4d5cc8b40f
SHA1
7468a2509a120536f9015bb3ff51ac0e2073c4b3
SHA256
162a77c0cef415c49a3e85d10d0032e71156a7291fd668923e0cd5d1f5a26c78
SHA512
f232346e150fe45d6bd0b60c36187f21289c3e744ef56d00ceaf5b783e2eaafaa1380a85dfa9299d83150d4dddc411e379854b6c05e5dc7c8f38d630fa1fe68b
SSDEEP
1536:Bm1NGJVGVbl2s8jraZKc1kNTfItlhG3jl1zMmSfJuITl9WiBN0YoO2wrMr:kX0Vm2sMraZtmGKgmkJue9WiBuG/m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d5b54c102100df4cbdc2e4d5cc8b40f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ