Outt
Sett
Behavioral task
behavioral1
Sample
3f8775b3e255bf8820678d16cc8ecf7e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3f8775b3e255bf8820678d16cc8ecf7e_JaffaCakes118
Size
78KB
MD5
3f8775b3e255bf8820678d16cc8ecf7e
SHA1
6f0fec1a4b16b3fd94a498c47a486218ebfc4922
SHA256
e469e0c599dc11ac3dc3fe12ccc10ba6bc0ca0b08a03cc9be2e3a2c7765be17a
SHA512
17f9c7373f423c33d49398b51f5a9fe05fddd222dfe8db88299c98b1f26e474999d4def7d495848fe7c1676252388a894fbda03aa823af7f3a0e04fdb89cb3e6
SSDEEP
1536:n7ZLNPp9pZBMQgImCPnYJkaA/ueH6+C6okbnanNFY0Qs7io/3mw+C:7ZppVgIBYKb/NH6Snan6DsEC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f8775b3e255bf8820678d16cc8ecf7e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ