Outt
Sett
Behavioral task
behavioral1
Sample
36979f287b9fec715c482d33b3b7cc33_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36979f287b9fec715c482d33b3b7cc33_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36979f287b9fec715c482d33b3b7cc33_JaffaCakes118
Size
72KB
MD5
36979f287b9fec715c482d33b3b7cc33
SHA1
8896113bbb0959eefac6bff64158e08ada789b1a
SHA256
0272970d40895ae85b4af052073475781adcf1361c7bbc3f3c0157cfc6b8185d
SHA512
737daa749c492bb19348a8f810953cf7f8bf408641ff412b1a384bcb4a7cad45ea5d16947813a81ce23d8348fa6bc84a3833fbf2df36984db1279ce856d476e1
SSDEEP
1536:MhBRVgrExucM9Ho2zyPmneqf+kfUWi0iEDQ2W6a+J7QFQeos5i:cRRsro2stqhfa0iNmbMFQeosQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36979f287b9fec715c482d33b3b7cc33_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ