Outt
Sett
Behavioral task
behavioral1
Sample
3c861e610072a9af25d8526d55a55f12_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c861e610072a9af25d8526d55a55f12_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c861e610072a9af25d8526d55a55f12_JaffaCakes118
Size
51KB
MD5
3c861e610072a9af25d8526d55a55f12
SHA1
2f4899d1e85f13ff53402ba183c3f8d0219009cb
SHA256
b1ed0ac530f7e12d5b62defccef6f9114d9ac1e43a2f637297e17001a0279597
SHA512
7a0fec4cb3899593c833f3f085111ab0953ff8d933b4a95a6e3ec58a5f6d6198a9e2be9a141fdbc05eed7247efc0b2ef747ae76884b8652f87e8f2f19f905e23
SSDEEP
1536:EG0E7eIcIl3A36MJYOMhPHTllBAn4OiGtH:EGX3cU3OF9MhvBMnpH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c861e610072a9af25d8526d55a55f12_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ