Outt
Sett
Behavioral task
behavioral1
Sample
3dbb3297e7d2b8664bc3a0722d214c1a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3dbb3297e7d2b8664bc3a0722d214c1a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3dbb3297e7d2b8664bc3a0722d214c1a_JaffaCakes118
Size
77KB
MD5
3dbb3297e7d2b8664bc3a0722d214c1a
SHA1
3ed427a5d889fab1576a8152b3c64708f2dc7a33
SHA256
476df1955c875f10cf28d3d82db1dd596d2b623968c8b2dd0425db9fdd15ffc3
SHA512
65ac4bf85d8d82a4ec4914e7c9ad9291ee8abcb25a68105ac95df15809f8571be650a542f5265c6f3d3ea5ce68bed1a3fa5e16ad8b8a65de5cd265c56fd8e520
SSDEEP
1536:mPO6KEVbsVP0gxALYA4OnNnv4rmQurhLIFptO4x7Yj2cwH2if4/I0k:cMEVbsVc2Qdnv4Zu1LSUK7Y/wWifCI0k
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3dbb3297e7d2b8664bc3a0722d214c1a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ