Outt
Sett
Behavioral task
behavioral1
Sample
36b3cd7321a13fb57d1ff84155af51c2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36b3cd7321a13fb57d1ff84155af51c2_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
36b3cd7321a13fb57d1ff84155af51c2_JaffaCakes118
Size
70KB
MD5
36b3cd7321a13fb57d1ff84155af51c2
SHA1
4ecec31f6b9c6bbf56f1f0623a540f7448832105
SHA256
9f29c56d2a213530edce99928baf27a6244e98b5f02db4f33cee6a8f7908e62a
SHA512
079e734a452c187c7e9f077d1c394a7442440b716668b2a211164c194b6bc32eea72d3f41e468ffd915ba7bd8b95abb212c329d7ac24a4dd9038fa80b71c8a1c
SSDEEP
1536:yl3E0TrPKYSTPUOWzDILF45WcfV2g3eN3wQU2r9m6WfLIA:E39CYS4bDIB4Jf3rAwb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36b3cd7321a13fb57d1ff84155af51c2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ