Outt
Sett
Behavioral task
behavioral1
Sample
3fa2d2197fda0f77c94424422c23a2be_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fa2d2197fda0f77c94424422c23a2be_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fa2d2197fda0f77c94424422c23a2be_JaffaCakes118
Size
47KB
MD5
3fa2d2197fda0f77c94424422c23a2be
SHA1
869b82a3317846dc68903c0e23186bbb4053c75c
SHA256
a996e43f445e64dd9207c5da4cce7de14c8c3f5fa4f26d745243f369456eb4bc
SHA512
916b289e5d2a0c66a0939ecca97e6a51eeee48550d3f6375676d45ce2ade6a49acf0de7083c50ce0484a2d7ec2928c7a006e67f3d57e7faef3f78ebc74c8d526
SSDEEP
768:V8Ohft9pnjz0bRjW49iruAV48FSrBxINDBpKuegMVksi3m3sya06ycjo3:V8O9Nn6RjriH4fxY7DKVv53Zf6vU3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3fa2d2197fda0f77c94424422c23a2be_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ