Outt
Sett
Behavioral task
behavioral1
Sample
9519dd5bf2dd02ab590133fa219bb2b1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
9519dd5bf2dd02ab590133fa219bb2b1_JaffaCakes118
Size
74KB
MD5
9519dd5bf2dd02ab590133fa219bb2b1
SHA1
0236ccef469f83c82d9c848e13dda2e8a6e567a2
SHA256
6048606afa2bf66c45971c6fce97301802dbca694f0bf3f8691dc7694b2d0647
SHA512
8dc9e72840b798e70ca05f1128a26c60d4cfa780779d4a8e39967b5b0d312b58374159ecdd68fe0e6a8552b865af5d70f1f7cd84f8bad8f4c015a04b23d25b62
SSDEEP
1536:EG+OXunXowft8qRr1BSEs3wu6Ui8yp9pT6yDl09o:EG+OXkfft8Yr1BS1g1UW9pT6y0o
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9519dd5bf2dd02ab590133fa219bb2b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ