Outt
Sett
Behavioral task
behavioral1
Sample
712248cd68cb833c433a724f2a3303e6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
712248cd68cb833c433a724f2a3303e6_JaffaCakes118
Size
43KB
MD5
712248cd68cb833c433a724f2a3303e6
SHA1
893a74fa147538c7d648e52c4b985384b2d8d39f
SHA256
0d2df5a604270fc1b48d6fb31ba34cf883612d1e846708c6203b491777397e63
SHA512
03433b64223c01178be08c07ca218c3d0f7b8e3ed0010f08cf829d80897488ce4fa48a246149f4ff4450f4f5eb9f95b073ed06d6e3dd71913a7426459db079a3
SSDEEP
768:1zExMf4sJGHw2jnVrgGhrv22aU4p2tlGhvdX2MKKCnPNCSzzf/lhFMBufh2yp2Jk:1zExMwCGQ2jnr2zqPGhzInPNNzz1h0qL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
712248cd68cb833c433a724f2a3303e6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ