Outt
Sett
Behavioral task
behavioral1
Sample
3225df7404b3e5db2ad287e192acccf0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3225df7404b3e5db2ad287e192acccf0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3225df7404b3e5db2ad287e192acccf0_JaffaCakes118
Size
46KB
MD5
3225df7404b3e5db2ad287e192acccf0
SHA1
d27aa313e0e9ae7d419546b73095809e2633e87a
SHA256
57678c63eaa6f4df0f19997e5224bc176ff9c02edde416cc95a286b8c70e1823
SHA512
c5470dd9cfb5a60c2eed104f03da1b6e06d2c22f7e422f9485badb4bbb3062a75b1eda1468b5fb3983bd9603b69646f584ac30f9aa2a82c3e87d04fd099a69c4
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTtNnCc8Xr9hO1kSlJw8fQrjLdOTUoxCL+Uh:mPO6KEVbsVP0gxNnOXvOWS7YrjLgo+Uh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3225df7404b3e5db2ad287e192acccf0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ