Outt
Sett
Behavioral task
behavioral1
Sample
3e135ad13678cdf74e4543813b28ccf5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e135ad13678cdf74e4543813b28ccf5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e135ad13678cdf74e4543813b28ccf5_JaffaCakes118
Size
67KB
MD5
3e135ad13678cdf74e4543813b28ccf5
SHA1
07941ae34d0075b4a5f466669d731771ea164920
SHA256
04eb05825b8432391d215732b4d70892c3223d573b58acec2ef4017e53d9cff4
SHA512
ff9f634ca021c70dda6b1fdfaf355bdaf38a8aff404d049e01b8a4c9e30686354f2c0d235a5ea156ab9805b3e1c87c9fec0c1231a8fb6eabd1baa244c8f42e2f
SSDEEP
1536:ob8Vwn/DQqnsDhjE0aLhtUQTLDsosdVWZl5D5LRET0L3xIhwSfzd:oz/DLnmhjE0aLgQbsoYcZjD5LRYC+hZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e135ad13678cdf74e4543813b28ccf5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ