Outt
Sett
Behavioral task
behavioral1
Sample
4dba11291ba2b14980ee5df522ec22af_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4dba11291ba2b14980ee5df522ec22af_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4dba11291ba2b14980ee5df522ec22af_JaffaCakes118
Size
67KB
MD5
4dba11291ba2b14980ee5df522ec22af
SHA1
50c061c65d3ef3770556cf152fe7e7c0eaf1b2cc
SHA256
2a450080715f893b5921e0ae60719f36ed6e69e2b924b965108c1bf9ccf28270
SHA512
4e7c27bd673a532f6c06f548a5143982953184523928d7d22edb540b1e7587ab2b4115ab8647c5a8b25e0219508c75cd479f5b168d50b64d398046eeec902c24
SSDEEP
1536:EGaNd8ZHr/h+5NSRpXiqMhLzr77EtW8zgJcM8nuT1Gue:EGaI1+jipX3OTQ7sJT1Gue
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4dba11291ba2b14980ee5df522ec22af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ