Outt
Sett
Behavioral task
behavioral1
Sample
3c8a1da2e68002cdd7ab87ffd08fa879_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3c8a1da2e68002cdd7ab87ffd08fa879_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3c8a1da2e68002cdd7ab87ffd08fa879_JaffaCakes118
Size
65KB
MD5
3c8a1da2e68002cdd7ab87ffd08fa879
SHA1
52e88fc1e1aa7c3705e77d5ca3d08a77cf81a70a
SHA256
863c5e00802ef43e9eef1b692cd7cc73db57657283ea66c068dcbb5b860ffab9
SHA512
b81b40eab2f76b5e087b942d9740771968800d1b8d1b744d063443c45a1bbba6c8ba7b8029ae78751a4dd5a1e268c2266d9ace91df01615167120f3fcd6aff1d
SSDEEP
1536:GQ3tfgXKoLyaAKfSh7JyUKILyhr4Vv43yOK4jAs+9SxKx+ODq:VfgXKoeKfIKIL0S43tJAs+AxKZq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c8a1da2e68002cdd7ab87ffd08fa879_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ