Outt
Sett
Behavioral task
behavioral1
Sample
3d37a7350db15dee8d0987ff35d8831f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d37a7350db15dee8d0987ff35d8831f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3d37a7350db15dee8d0987ff35d8831f_JaffaCakes118
Size
70KB
MD5
3d37a7350db15dee8d0987ff35d8831f
SHA1
31da48fd5705a0298f7cb046642ec3add483ef01
SHA256
94871d85767810c04968bbc9a498ce6219a3760c79e3b43f660d02f1b853fa31
SHA512
289548e5d29a151da0326c1c63a109bc09031f87f11bb9dbc99636f34067b615e24ed88dc2b82b0b2707cc6bc9293c416e92aa11615b203f6d88b8f1ed1306c3
SSDEEP
1536:YJEu0nVKNtQOY6UHTnsZgNZBfQaEiN89iLunwMR:YmJnVKoO/uQYZa9o8cLywk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d37a7350db15dee8d0987ff35d8831f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ