Outt
Sett
Behavioral task
behavioral1
Sample
3181a40d2c029ceb6462c7e2166c6a7f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3181a40d2c029ceb6462c7e2166c6a7f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3181a40d2c029ceb6462c7e2166c6a7f_JaffaCakes118
Size
77KB
MD5
3181a40d2c029ceb6462c7e2166c6a7f
SHA1
66632c80214c8d62d3637a6ead5b06f982bb8b66
SHA256
39986271994ab1bf8623f395001f3c286ffaf8a61dadb22c1ec1b60f48409e0f
SHA512
190f81c37481c7eeebf14fa51da427b60a9920a77887e3dbaea621138b401a8b1a456fe0284444768095c727020a92c276ffd05968aa0247fbbcbbfb9997b6f8
SSDEEP
1536:soa1lMWiPf+REz/p93v3mOpOjoRvT3tURRBAIYx4mypwbmgVhmq+lSZIBhYu2H:SMWiP2Rsp9PmfjoRvT32RfDiu8mqUlcj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3181a40d2c029ceb6462c7e2166c6a7f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ