Outt
Sett
Behavioral task
behavioral1
Sample
3e887c44cd4e8243f471391b6d222eb7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e887c44cd4e8243f471391b6d222eb7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3e887c44cd4e8243f471391b6d222eb7_JaffaCakes118
Size
56KB
MD5
3e887c44cd4e8243f471391b6d222eb7
SHA1
ab1194d5ea91767652e5e888a5d4ad3de79ef822
SHA256
698961183b56ff5c4b84af619f292451818df98cd76e025692765aa211542511
SHA512
750cec045927a313a3b8176919b468fb25bf9879342cfcee2a3e3d6da15d821415aa0c618b45f667752309b1b5c4e4972b998faa044fa135942e8f8f43a6192e
SSDEEP
1536:Bm1NGJVGEqpe3SnAOJ0TeTVVm4Q9CMnfe:kX0Vkpe3SAE0TeTVkmMfe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e887c44cd4e8243f471391b6d222eb7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ