Outt
Sett
Behavioral task
behavioral1
Sample
3936667d101766d104bf5a8bd376cf41_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3936667d101766d104bf5a8bd376cf41_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3936667d101766d104bf5a8bd376cf41_JaffaCakes118
Size
65KB
MD5
3936667d101766d104bf5a8bd376cf41
SHA1
eff10db93eda42e705b9e0470c3ad7752b31369c
SHA256
63f39cb90642e6e4da8b4be6c4da09b807ee3bde27df2bfe338ee6dd27196e8d
SHA512
7384522fe5184747ddad055d903528351745272398b26875248ddcb8b18e465594e029590f0e07a35d63b70e671a5e0b98b2c7ac18c4cbcd2c3f36df9c937f9d
SSDEEP
1536:1zExMwCGQ2jyx/ekKNXsofIDAzIT5VYvoBxjo0kl6pdHty:1I+wCGv+x/ekjaIS23YEm0kl6PNy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3936667d101766d104bf5a8bd376cf41_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ