Outt
Sett
Behavioral task
behavioral1
Sample
9475b4f29f0919280e32238946a2df1d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
9475b4f29f0919280e32238946a2df1d_JaffaCakes118
Size
57KB
MD5
9475b4f29f0919280e32238946a2df1d
SHA1
5b53660f53af78c150cd6128c1eda181fce611b5
SHA256
58860e1b1f93d5c2a3a5bd1c435c24a1189aab11c7ef44470bf260f9a3f58838
SHA512
748a2df422b91a52591ef98f5c2a4caf7c426b1cf251d0fa6bab09cca609fa02a4cb714117ac73aed0d58cd959a92e50f0941b048007f64da63d8c98e792f095
SSDEEP
768:h8WTpVT0X8zbX6R2nHyIFC2h2li36jGioV1rqOKrx7qwyihtH89vl4rVh17XNvnf:RVT6R28q2w3YoV1GX3BAvuf7XcfA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9475b4f29f0919280e32238946a2df1d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ