Outt
Sett
Behavioral task
behavioral1
Sample
3c58dfbf57f2c9b2bb7f9ffa76fe3599_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c58dfbf57f2c9b2bb7f9ffa76fe3599_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c58dfbf57f2c9b2bb7f9ffa76fe3599_JaffaCakes118
Size
64KB
MD5
3c58dfbf57f2c9b2bb7f9ffa76fe3599
SHA1
ecd65d9b22bf054bfe64dc0fc39d1bbcc5922a55
SHA256
16ac9e8ebe0f36881614bf15bf5d556ae18da7aeebac98f2c6efcd957b82dd65
SHA512
d8b8c974756f63631b2f515a27e2341c829c0dc03a799b4ec6a9c9164db887e429046fbdcc1f174d7e62e6257b28b9fcab6c77b7b729f233cc3fe3246060f49d
SSDEEP
1536:MhBRVgrExucMY22dRvXzjEVBi8cGsDPYAxnpKnM77Qq22:cRRsVidXEVBE/DPYc8mQc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c58dfbf57f2c9b2bb7f9ffa76fe3599_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ