Outt
Sett
Behavioral task
behavioral1
Sample
854e5197f94beaf41633cbedfa65bd9e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
854e5197f94beaf41633cbedfa65bd9e_JaffaCakes118
Size
40KB
MD5
854e5197f94beaf41633cbedfa65bd9e
SHA1
eeddde135ea8a7fe029db46d458ba5a74ce7c814
SHA256
27787e3ef25e421d88492133045b8745400adf120e4d174927ea4c05ebd8d301
SHA512
eda5e2c4b42ac5fcbb1fba71f8e2383a7bd36455730571e1eeba159cc7c2c9613ddda7270b59ac9cb37b32991999da2741a29b0cd3fb924f5062d24f01920a50
SSDEEP
768:qz6nzm1b5gNZLLrp2mD8uZCZxFHnzKE+Po3qhptYJDq0LonIYRo+/:qmmMRH8uZCZxVKE+dptYJgo+/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
854e5197f94beaf41633cbedfa65bd9e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ