Outt
Sett
Behavioral task
behavioral1
Sample
69979693f6853c94af199df2904215ff_JaffaCakes118.dll
Resource
win7-20240704-en
Target
69979693f6853c94af199df2904215ff_JaffaCakes118
Size
60KB
MD5
69979693f6853c94af199df2904215ff
SHA1
7ee4b1a7de4098e922a71b743a39ebf9f8204a36
SHA256
1bb93d05f9e86b54b12207b7fd5d4317d3f2fdf35fff0fdb802e85ede7ad9406
SHA512
669ea5ad64ba8f5bc8e2274487734cfec98218fc04abab77eee0d648d825d6eee54682c9d94aabe76144a2a36eacdb89587c40ba51a8efd877e10a722c87d954
SSDEEP
1536:soa1lMWinx29jfOJt0hN1bZo6Gq+E3s+X4GsWDmpKL:SMWinx21fACN1bC5q+EcEsWDmpA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
69979693f6853c94af199df2904215ff_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ