Outt
Sett
Behavioral task
behavioral1
Sample
951b3ba6a5276c8cb84957dbb30ba1c5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
951b3ba6a5276c8cb84957dbb30ba1c5_JaffaCakes118
Size
81KB
MD5
951b3ba6a5276c8cb84957dbb30ba1c5
SHA1
4764db652bc26d418b10a64bb56a585d0792b280
SHA256
600802340e91092c2def9135be7f1254cbaf516450869f628f809e52232e0746
SHA512
17d81326e1ca8d14679a1cfe6f1daf79f1712a2c16e06be96d8475cec9b87e2b878b3ad08396de4b6e92765d4d0931a53a4db11d9e2b6806a3e2bd057d8a6acc
SSDEEP
1536:+VZmwC8/d1Z/xyuO9vg1C1711CH5XfrV0FxJLJzuKtUp/GLb:KkwCKdD/xy59VF11CxfmFx3zzX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
951b3ba6a5276c8cb84957dbb30ba1c5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ