Outt
Sett
Behavioral task
behavioral1
Sample
867105081c63f0134eb0bab343dcaec0_JaffaCakes118.dll
Resource
win7-20240704-en
Target
867105081c63f0134eb0bab343dcaec0_JaffaCakes118
Size
47KB
MD5
867105081c63f0134eb0bab343dcaec0
SHA1
97636bb2463a4945d71aea04abf4a32489e48042
SHA256
d474805394ecde9851a3dca3960ac5525066bf75c19f52e038b49f257c3b6c62
SHA512
7957ad9fa070512d391010aa70df207cb6f42031fa2d8ba7bef809e35c9ddd621b24b3086d33e493b34132c2a557e7a311d00cf906324926925c662149784f66
SSDEEP
768:GbvLDaaMact8TPOoCIJgqNkwNihvAMpjJyLCEzal5c81tfBb:evkheTNcv7KOPfc8P5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
867105081c63f0134eb0bab343dcaec0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ