Outt
Sett
Behavioral task
behavioral1
Sample
36b46d671d2ca02f7eb46b13bb76374e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36b46d671d2ca02f7eb46b13bb76374e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
36b46d671d2ca02f7eb46b13bb76374e_JaffaCakes118
Size
54KB
MD5
36b46d671d2ca02f7eb46b13bb76374e
SHA1
b69c44201f80ddeb29720992156f17f530f5be5b
SHA256
b008a54e04bc806c51a901f857425c8137a53ddbf70f38cd42e1bf24bf77d50b
SHA512
98d8a1eb98d75ac7809ee97a0a4cd8ed8056ef4fac3212ef06840f92460c83ce9ebf2249d969b8b71a7eb5cc2de3e478305ee6433f10be98285e90cfb7fdb69f
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gTRnx0k5gdFSJHDmf6K8FoVn47CUv5PW4NTqb9mq9Dt:mPO6KEVbsVP0gPEFOGq7LFqPmFg9Lp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36b46d671d2ca02f7eb46b13bb76374e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ