Outt
Sett
Behavioral task
behavioral1
Sample
36a6dec8f7355823e464d8e6a859b3da_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36a6dec8f7355823e464d8e6a859b3da_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36a6dec8f7355823e464d8e6a859b3da_JaffaCakes118
Size
82KB
MD5
36a6dec8f7355823e464d8e6a859b3da
SHA1
7ca0cef3da06d580babedfeb984ee002155d2fde
SHA256
1ac20e25b1a6ff8e21b52d4cb73582afaf568f795ca1632ca5ce326b83c87a51
SHA512
190091a7a8d93b0756c66266ac761f07b5f09855353294d108a4215678e9d893c20804443dd16d717f9883fdcfc6af6086eaf0ebd8d790cae96f05256ad54b2a
SSDEEP
1536:jZIcCxRGG0s3KRAd9SloSUv5Qtf4TT7TItwbB6momxxr3vLZ4ALlkfnd03inMD3c:x+oGxKGwo3v+twgwFt/LZ4w6d03iMDs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36a6dec8f7355823e464d8e6a859b3da_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ