Outt
Sett
Behavioral task
behavioral1
Sample
946cd26616434f6cc813d59bd4c470fc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
946cd26616434f6cc813d59bd4c470fc_JaffaCakes118
Size
67KB
MD5
946cd26616434f6cc813d59bd4c470fc
SHA1
4ca232876038bbb89c3ff2c2894e337cad752ee4
SHA256
cf2d675ef87799db8981b3492e76ff79916825989617ec612ee3512bd5ce3f05
SHA512
7551f8d7a2c2574804621c03ebcf3d677dbd8cf71158e129d18ccfabe5086838b81780f82607ae0d702c5d11f484255b3129fadf59294bae831b2441427d90e8
SSDEEP
1536:yl3E0TQZSG8SEgjsO3zmg5zWNuywJLTefZpmWEC:E398ZS/SlL3zmgZ5VLTkTmW5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
946cd26616434f6cc813d59bd4c470fc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ