Outt
Sett
Behavioral task
behavioral1
Sample
3759f925bc5c3e165cd0ffec626b1647_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3759f925bc5c3e165cd0ffec626b1647_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3759f925bc5c3e165cd0ffec626b1647_JaffaCakes118
Size
79KB
MD5
3759f925bc5c3e165cd0ffec626b1647
SHA1
ab81a4393af2a019e503177e82a825f2ac3786e5
SHA256
634f5b293d9575ce3c51304a0d476da155dff4ad65a59d9ddf39dca2b169b843
SHA512
3ba9b9cc38f174822a3948f7eea8a05879ff5c0f941a95dbbf796d1319f183a5f1632c406472052b33a94a9b837846d8c013c43529928c6b158f2431f23f3cae
SSDEEP
1536:anReaZCYLMAZD+ewMZIM6y6pfKroB5QuJo+dGt4:aReaZCjWC9yrECQo+dK4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3759f925bc5c3e165cd0ffec626b1647_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ