Outt
Sett
Behavioral task
behavioral1
Sample
3404b953352c72f07ae43b5beb398428_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3404b953352c72f07ae43b5beb398428_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3404b953352c72f07ae43b5beb398428_JaffaCakes118
Size
64KB
MD5
3404b953352c72f07ae43b5beb398428
SHA1
e7fa6d8d44597d9ca0d0e0777fc12f636aa688b7
SHA256
2d9a6b56cbd4f848c339587a3c89bc8ff8b298032829d48486863ff20bf68fdf
SHA512
76b31e4894d258c9e7382f3df8d4159c1b60395ce2cae6085f2514f613fe2a18b09d507c1540eb535b2fa661f1df2c973de2c5531bb770e8712ce34322144002
SSDEEP
1536:mPO6KEVbsVP0geZgAazpvBHqxPTB4LIXG0kGq6FohxRo6eF534F:cMEVbsVcdZ7EpvBH6iMW7IFohjo6eF5i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3404b953352c72f07ae43b5beb398428_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ