Outt
Sett
Behavioral task
behavioral1
Sample
690e47910cb0807d328b243efed52395_JaffaCakes118.dll
Resource
win7-20240708-en
Target
690e47910cb0807d328b243efed52395_JaffaCakes118
Size
59KB
MD5
690e47910cb0807d328b243efed52395
SHA1
3d5427e0ca98826318789122379e21706afc653c
SHA256
c639865de61baeedc605447025804dd1727ece839be537cc2fafe9a2618a03c6
SHA512
8b798ec1f43be11087eda238c1a338da2386228d85700c60bda9aaee602f3bffede80794d0f527f863bcd14f210edc431a894bd612f9d4dcba55cd1b97e5a0be
SSDEEP
1536:V8O9Nn6RjriWmHDPe2SBQlacTwQbWGwP6lCKWp7xif2cF3:2Oz6VWtLe2qQlabQyGe6lm5FcF3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
690e47910cb0807d328b243efed52395_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ