Outt
Sett
Behavioral task
behavioral1
Sample
3c8aeeb22063530bfbf96275876c16b4_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3c8aeeb22063530bfbf96275876c16b4_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
3c8aeeb22063530bfbf96275876c16b4_JaffaCakes118
Size
67KB
MD5
3c8aeeb22063530bfbf96275876c16b4
SHA1
f5e91838dff803caec0efd155b0554457289ad46
SHA256
0c5745136028783f84ec67ea2cb1489101bf1e746d815bb075d5fa16ae82cc0e
SHA512
65163f3383e412aa0d612e6a53a0f353560778b20d54ae1aff13a9ee08fd68913fe183cbffeca76294238f60406494bc8c649e41f98c7907633c782529b2a479
SSDEEP
1536:GQ3tfgXKMA43Lsj0WRzpgeQYETCGFXFIpyl8Ij9NbUDSHQ2R:VfgXKYLo/RzuYETdFVTl8IjvIeHNR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c8aeeb22063530bfbf96275876c16b4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ