Outt
Sett
Behavioral task
behavioral1
Sample
3ff27983bfb1455ec44bf39d9d193673_JaffaCakes118.dll
Resource
win7-20240729-en
Target
3ff27983bfb1455ec44bf39d9d193673_JaffaCakes118
Size
52KB
MD5
3ff27983bfb1455ec44bf39d9d193673
SHA1
8e09e267dbc6619ee95d41c40d5f766a851a740a
SHA256
bfa69e2429bd69035ea11fbef49ce14461310696e32b5234c98c5def391a591e
SHA512
b6cc0ade77a64192730603908a3628260aa8754d7349960b8b455fb41e661e048fac53c236eb9147ef9cf13d04ee8f9445505f886fd599493768cb72e839a3bb
SSDEEP
768:2bHbIsfaJZd3lZ7yJ1FIAuFmdkBUQHP2+gvZ3On4+YbCsCGH9w7lsFdu581c+e/v:Y7BstH741F7mBH25D+BvdlsXuGc+e/Fx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3ff27983bfb1455ec44bf39d9d193673_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ