Outt
Sett
Behavioral task
behavioral1
Sample
4d987e990ef96280042f31180f829174_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d987e990ef96280042f31180f829174_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4d987e990ef96280042f31180f829174_JaffaCakes118
Size
58KB
MD5
4d987e990ef96280042f31180f829174
SHA1
7bbec19fefb7c6806deb51a1b51063ad89f4ac46
SHA256
3290e0fd7840435ee6cf39a09119bc84a87d40553dd86e223dade6fa58df3397
SHA512
927177a61b53bf8f29171156c42ea34d1b99ce58b45f2e4ae12041cf8a1d9d34791d8bd0fb6abb2052b238c30d54eff80b8c3f6cb1752a174b17119a127e5efe
SSDEEP
1536:soa1lMWiIT6185MBVtsza7Y6xsGHoDZfXHpGEnPY:SMWiIeakWahxsGHoNXHpGB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4d987e990ef96280042f31180f829174_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ