Outt
Sett
Behavioral task
behavioral1
Sample
3c291d74d7d08d558f6830076a30a1d4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c291d74d7d08d558f6830076a30a1d4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c291d74d7d08d558f6830076a30a1d4_JaffaCakes118
Size
56KB
MD5
3c291d74d7d08d558f6830076a30a1d4
SHA1
f43648ba403c0cc8bb2e91c07adcfc2c8bb95b67
SHA256
086a09ae0c0bba3115a31742f952682e9f5e5f48cc477791ecda792cf7964ad2
SHA512
edbf184cfbb79cdf4d7193d2e1e5d388fa0ee3d32ca5f5ecf3773e6346e55f5aa8dfc634c25c38239abc8c7c00dbcfd8de555a0b982c71558915bfff482c193c
SSDEEP
1536:RVR+c23mHYQ/nQrkFO3VHS8AJbjYIAEmPjG:TR+c23Y/ng3klbELPK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c291d74d7d08d558f6830076a30a1d4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ