Outt
Sett
Behavioral task
behavioral1
Sample
3b6d0ddc8295d6fa1d8f283785ed2319_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3b6d0ddc8295d6fa1d8f283785ed2319_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3b6d0ddc8295d6fa1d8f283785ed2319_JaffaCakes118
Size
76KB
MD5
3b6d0ddc8295d6fa1d8f283785ed2319
SHA1
7c53964f596f3a8e521fa1897133bda6cb3a9f67
SHA256
8100f0d61ec266adbc05ca9c88f20eec570380a7fc693bc8c288428abc9be0fb
SHA512
69e6464c59ea2428591c1fda42d40fd0db830b8615a4dd045cc805262bdffc4371272011e789948feba5497651f1549f22b6e0fcd3f5026adcfe73c31391b28a
SSDEEP
1536:1zExMwCGQ2jhfZUeqeEInExLx5tNS10pCMQZmiNb7hLHQvrmOpGbfy3brjXQTK8c:1I+wCGvtfye/nE3TNMaNiLHQi6rji4R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b6d0ddc8295d6fa1d8f283785ed2319_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ