Outt
Sett
Behavioral task
behavioral1
Sample
687a640211d67316cd229ab569de7be1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
687a640211d67316cd229ab569de7be1_JaffaCakes118
Size
64KB
MD5
687a640211d67316cd229ab569de7be1
SHA1
7c306072cab1f4040c1788a6663b8cec529e873f
SHA256
4d02fc33e3ad87bd6e5d265b2dc34d6af9cf9d84a287ee3e18a247b521e6edf6
SHA512
cfbd95ff82e709c2a1a29564b4e97e3bdf91a829a7d61c665377f48aee0f65d048604b24547c9a90d9cebefa8241df5a24c1403f3a74993c44ab571c371c6950
SSDEEP
1536:soa1lMWi7B1CHWM6wZfyoGcd8E7T0rtt3kgWME04B9idRg:SMWi7DCHwwZqaddWfDxE02i0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
687a640211d67316cd229ab569de7be1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ