Outt
Sett
Behavioral task
behavioral1
Sample
3241ae297c135aea1505afe68e89e7b1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3241ae297c135aea1505afe68e89e7b1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3241ae297c135aea1505afe68e89e7b1_JaffaCakes118
Size
58KB
MD5
3241ae297c135aea1505afe68e89e7b1
SHA1
a0b04788bf9e5f3683ade3f2abddfecfb6fc971b
SHA256
a6b9ce437b5172c6571fb4aa1b0cd98d1bd42b57d1b30dce9a0f58ba5c99a094
SHA512
6aacd250df8ab67c058e0e7874aeb2f8dcee9ce29ec7ed596b5c54205bcb50315b4fda758462ab613ccd75d7e0228033d99a0a284e22f634e300692ebcc85833
SSDEEP
768:nbY4lPQTT8I+fV1o1V9HeGQFTL77j8tWNezXdteWeDWyopMdg01ZFl82l7u:EGPNrN1o1GFTLLEyWeCyRgI7Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3241ae297c135aea1505afe68e89e7b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ