Outt
Sett
Behavioral task
behavioral1
Sample
31dfff340c6a244af764c8b8d93d3311_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31dfff340c6a244af764c8b8d93d3311_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31dfff340c6a244af764c8b8d93d3311_JaffaCakes118
Size
71KB
MD5
31dfff340c6a244af764c8b8d93d3311
SHA1
1afa3108a5d2f1722c3c640de57a0a801d3c42fa
SHA256
861867463d8a51185ef83646025ec8ff526b635cd988225e6cdac6375010bbe1
SHA512
bf696783c34b02409c1d64f6bc62b2c32240c71ff3c93c3cc515f725ff2a2a1748201ab072779bbb6a2d961c83de520e36e8f247b5f40f08d747d1ba37650982
SSDEEP
1536:yl3E0TLktkkrkSCnkXS9eN2mSnir2KybMwpYX:E39skkZCngS9cN1yFbMwq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
31dfff340c6a244af764c8b8d93d3311_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ