Outt
Sett
Behavioral task
behavioral1
Sample
3885bb4821f5ff6760db4d947e15cd71_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3885bb4821f5ff6760db4d947e15cd71_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3885bb4821f5ff6760db4d947e15cd71_JaffaCakes118
Size
57KB
MD5
3885bb4821f5ff6760db4d947e15cd71
SHA1
19ab40110971ecb7519c07f2b83ab675292477f3
SHA256
1931aaad80cc16bda2ec5933cf4598a30972f300362c286af6a8af686f9f46ef
SHA512
a311c2aafad7418f0b734d97d5935f7332e96dc707aca7dbd5019101db8a067ad901ce60d05ed98f8611aad2b2e5de50933cecd01fc26f99d14d27ed3b9c4c79
SSDEEP
1536:yHZpd8YP6KMsAIWo0lJBFkMJ6GczfOtX+4hK:yHLd2KMss5kM/ifOpTK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3885bb4821f5ff6760db4d947e15cd71_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ