Outt
Sett
Behavioral task
behavioral1
Sample
3974cf539e99741df1f68e334124fcc4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3974cf539e99741df1f68e334124fcc4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3974cf539e99741df1f68e334124fcc4_JaffaCakes118
Size
60KB
MD5
3974cf539e99741df1f68e334124fcc4
SHA1
067dc68fd60111fa33d88271adc650076df0a003
SHA256
16ee08f12672eae4dfae46f8666c1f403985f55a9139b79b2471e5a43a974f6a
SHA512
0d787c55ca882972295b6eb36f653ba6226fb2ac2dadbcf5d85a49a6ed27e2303ef249974eda43019836d3bd282e202215bfd3864e36a802b95d9f24d4a98f06
SSDEEP
768:nbY4ldvSAflqUhIuAFs6wnI2Wyw8P4efz9zK9krwC5/23jIsd2Ll/2BhoifxbiqL:EGFBsQdA9w3Dfw9uj/2zIHxunfx2qL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3974cf539e99741df1f68e334124fcc4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ