Outt
Sett
Behavioral task
behavioral1
Sample
37a3118397fc41835633c9be13601b1d_JaffaCakes118.dll
Resource
win7-20241010-en
Target
37a3118397fc41835633c9be13601b1d_JaffaCakes118
Size
60KB
MD5
37a3118397fc41835633c9be13601b1d
SHA1
206a543963743e3dc619a9f0726b21206bf35718
SHA256
d278f914a929552be2e0539a29c9103c8594b6de110f91f1bce5d794e193932b
SHA512
0740ef33d38b3fc8fe421d8b4d09414d800e4c2b830a2382af8a11d52d7bf5409cf5bfa4f4ef8903e48c3d2fc5fe74dc39510c1656ad3bbcf57d13ee05945f0a
SSDEEP
768:hM1opOjOOfwv85TBVoFYEx7arIoC4T78VPfcMBXrXENIywlySfADVdyUJr/Y712/:anR7riRoPczUZtdDm73UdpB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37a3118397fc41835633c9be13601b1d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ