Outt
Sett
Behavioral task
behavioral1
Sample
37235d6cfb5252580075a44f97e68df3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37235d6cfb5252580075a44f97e68df3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
37235d6cfb5252580075a44f97e68df3_JaffaCakes118
Size
65KB
MD5
37235d6cfb5252580075a44f97e68df3
SHA1
e007b54179b27ec53130f1101d5a084f2efed9bb
SHA256
987fe67471379fc9e57ee9b3e2cbff58d9642cde2b79c921d27b7d34ab4d094b
SHA512
5537cc53d1cb0e412e2b5f5f5e4d1c57e785009b95a867fd54ed17e9237635beb2155ffab5eabd60719b7f02e43aa7888257f1a2e757b4af5db4fa6b1205b77f
SSDEEP
1536:5jRmO3A4xeLIQmbjwWXJ9L61gMgSK61QOV49dpYIlg:xfw4wsQmvrMgSK4ideUg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37235d6cfb5252580075a44f97e68df3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ