Outt
Sett
Behavioral task
behavioral1
Sample
684d985c59092af057bbb1c6fbd511d4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
684d985c59092af057bbb1c6fbd511d4_JaffaCakes118
Size
70KB
MD5
684d985c59092af057bbb1c6fbd511d4
SHA1
9ba7faa7737697c0f1ad93a7b1939a3f64ef9679
SHA256
4f8afade63a05b428af12982b44335913b8a9f513412653dbcb8b89c48123156
SHA512
3e71157ad29cc39c7f1546350bc91d4b8674f0d48c56bbc29715bf7120a0930349f6eebd835cd4d624970c121680f2b97d7e41d53e54eaed7235ee9371ef0184
SSDEEP
1536:anR1ka+m7eT28DzmF/x4fGeXp1ERULmqOI+aBw3f0e/Gmu:aR1kBmJ8DW/6OxUL5pUDu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
684d985c59092af057bbb1c6fbd511d4_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ