Outt
Sett
Behavioral task
behavioral1
Sample
681da4fb331b1027b43696240922d14e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
681da4fb331b1027b43696240922d14e_JaffaCakes118
Size
57KB
MD5
681da4fb331b1027b43696240922d14e
SHA1
65024eed6432deceb0847c10088103bef5f156b0
SHA256
15e5c61af03d590fdb21c195f9323a9a4b8467ed01dda149f5d07310f47e1295
SHA512
19042a6255aaa9f5061a06d4c0346a350078a3c1485f5ece90263177654fea74ebc51dea3db3cab99c78a780ad720ff88b8a89f53682189d8417ca56efd8ac34
SSDEEP
768:wX7l2i4+6WhcbSiaIunldMTTkArKzzLg6s/SuQLi3E19ppUHTKuNMk4wSfubkjjO:wXx6VEdApKzzEtnQO0Np2TDNT4Xfub6O
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
681da4fb331b1027b43696240922d14e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ