Outt
Sett
Behavioral task
behavioral1
Sample
3083eb6b93895950c97d79b4e74e6b09_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3083eb6b93895950c97d79b4e74e6b09_JaffaCakes118.dll
Resource
win10v2004-20240708-en
Target
3083eb6b93895950c97d79b4e74e6b09_JaffaCakes118
Size
63KB
MD5
3083eb6b93895950c97d79b4e74e6b09
SHA1
3b0af92bb06eafc0bb00281af50b88280f5a368b
SHA256
c4c46859138954557e825a4e48ac041c16adca5a778d3105a1b2875816fd85e4
SHA512
6ebbc7a216841e547fd53ebc56a40471ab8408f66e488441ae381906532cdfed58ce887e9700533f93d18e175f10e3224c3f63177991e0e443c9219075a9d261
SSDEEP
1536:Cn5P0l70x5CJpV0Zp7v35AXL7WThSDUbqRWlUeiR/XvhgskZpJzv:w5s70x4JpVYD3aX3WFSgbqRmyR/X5A5z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3083eb6b93895950c97d79b4e74e6b09_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ