Outt
Sett
Behavioral task
behavioral1
Sample
3c2f649aaaa660943aba446fb3d00752_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c2f649aaaa660943aba446fb3d00752_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c2f649aaaa660943aba446fb3d00752_JaffaCakes118
Size
65KB
MD5
3c2f649aaaa660943aba446fb3d00752
SHA1
9164c2892b50c22178503d82728c341a9151cf83
SHA256
208b902cde1daa402880b387181bb5976e0feb039e032d2695d5ad969cd537bb
SHA512
61ca7c5d9e03c858c5f388b446b4aafa4d888b3176d7bc311749450f992b6edb23211d3eb7a59a601322b118244b83d47b7c737febe4f11c5f72be05c7e4e3d4
SSDEEP
1536:qmmMBkJAp2PBYZFCpPkH1Rkw/x6oTQWO2jm2MLAHH:QMBkGy0hz/x6oMWxMUHH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c2f649aaaa660943aba446fb3d00752_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ