Outt
Sett
Behavioral task
behavioral1
Sample
343e388de1bf8a6144ee0d77a312681c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
343e388de1bf8a6144ee0d77a312681c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
343e388de1bf8a6144ee0d77a312681c_JaffaCakes118
Size
55KB
MD5
343e388de1bf8a6144ee0d77a312681c
SHA1
d18382f4fbd19c8fb8bb0494221d4b0a103a3933
SHA256
c3f9081c8bdb3655065f06c7ea52ab37e5a5e826ba9f81e0575d51c8522553ff
SHA512
637d40871388c54f3ba42fe950212b1b36b3af602a27a2712d83d57ad5dc112930a314e89fd79421ffa19d7f6a80c40ccef16a4566a48682815a76e5a28ac83e
SSDEEP
768:V8Ohft9pnjz0bRjW49iSRYwweXBoOV3gqp46HlW3lOw+RK26vijnnRR7bWY14REC:V8O9Nn6RjriSigXWOhpmOwupH1YT3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
343e388de1bf8a6144ee0d77a312681c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ