Outt
Sett
Behavioral task
behavioral1
Sample
3e2023db9aa9df7abe27fdf641d88689_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e2023db9aa9df7abe27fdf641d88689_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e2023db9aa9df7abe27fdf641d88689_JaffaCakes118
Size
73KB
MD5
3e2023db9aa9df7abe27fdf641d88689
SHA1
7cb6f4a5a77bbf16c83087d70d1196fe7ce4e500
SHA256
a755748e6d251bc9eedd436c81ccec0c86c94da8e0c742c1b045eeaab20486e9
SHA512
56af0a0f6ab9cf5f9a4969d8a78fdfcee1cbef66821df7e2e87bc904ed647255f39d9ab8b03b1cc4e5b18b8680a2995ca9416f8a9c0841b2eb5dbd19020a25d7
SSDEEP
1536:EGJH2rSllU6bzgxaCJkqlDd7oYk1ubpVpUE7KsTKb:EGJH2rQU6voXkqlDWYk1sfD7KsM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e2023db9aa9df7abe27fdf641d88689_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ