Outt
Sett
Behavioral task
behavioral1
Sample
3a751df5b0f92c8e8f81289bb875ca5f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a751df5b0f92c8e8f81289bb875ca5f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a751df5b0f92c8e8f81289bb875ca5f_JaffaCakes118
Size
79KB
MD5
3a751df5b0f92c8e8f81289bb875ca5f
SHA1
b69afeaa472c64c4ecb4e6d6816ddc05af0b1e80
SHA256
17552aad859ff530ff1ec6b64c1da26a5e2175abe9bf556fdabfc87fc77a3929
SHA512
90c866e718a875b6edab34bda8090134468f8ed76a720dcf8d1cdd0d68e092ced7810a03479e5d1aa94ea91fa870e736988717041cc1af4e53914f3a1cefc608
SSDEEP
1536:mPO6KEVbsVP0g2HBZLNvvlyKTo4jrHpl8rBRaPX2:cMEVbsVcRH3JeMrHpi9E+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3a751df5b0f92c8e8f81289bb875ca5f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ