Outt
Sett
Behavioral task
behavioral1
Sample
3366a490ad7e7b760ecc148eb9c44050_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3366a490ad7e7b760ecc148eb9c44050_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3366a490ad7e7b760ecc148eb9c44050_JaffaCakes118
Size
58KB
MD5
3366a490ad7e7b760ecc148eb9c44050
SHA1
4467275782f09350a7b94c6047d2a1f996c97df1
SHA256
967b59dd78c22b2cb13edd550efe9ed64145d73113d6e4dba283a7906be4fecf
SHA512
cb5a93d04bb9cf4868bb1f15a5829f01552ed9a75c4f974a660cca58920aeb5caaf4831a5e64a00ad1f2a309b5ea03a0c08e74a646431a77518105e7f38db3f5
SSDEEP
768:yuUr3ip/IHI7NQTvOfVZPpfV3MjmUyDG3I6h39QHQAKGC9Mu7ekIWQqYERCMZUMh:yl3E0TqdUHTF8bC9MuwERCtMce9eeV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3366a490ad7e7b760ecc148eb9c44050_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ