Outt
Sett
Behavioral task
behavioral1
Sample
3dd9d3dbcd2069fe3ae4d61f5fdd5f0d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3dd9d3dbcd2069fe3ae4d61f5fdd5f0d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3dd9d3dbcd2069fe3ae4d61f5fdd5f0d_JaffaCakes118
Size
64KB
MD5
3dd9d3dbcd2069fe3ae4d61f5fdd5f0d
SHA1
fa8ffa936a96bd8b7131a873e8edfa26a79fdcda
SHA256
b29978b454d4ebeed25120fadc72863d712b16a48344af1f6f4ead2ec70d1d9f
SHA512
75485433c2718ca50345bcebc6afe2c456ec1d7250d643dd455bea9c339bb9ea94eaa833771bdac1ef2088d90d93dcbf8d6abc88b4cd507490c5ee121129e2fb
SSDEEP
1536:RVp0RjogTbIrESrcxZ8l8yTQWw37HV88laU:Tp0RjogTAE7Z8lb9wr188lf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3dd9d3dbcd2069fe3ae4d61f5fdd5f0d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ