Outt
Sett
Behavioral task
behavioral1
Sample
9553603f7601ad12ab6b8a8c23e11750_JaffaCakes118.dll
Resource
win7-20240704-en
Target
9553603f7601ad12ab6b8a8c23e11750_JaffaCakes118
Size
56KB
MD5
9553603f7601ad12ab6b8a8c23e11750
SHA1
7e22734479783ceca6922b44ca5bf4ab3001172a
SHA256
3d7d09801967d2e989a3a37668a35860a048e4c68606e2268706ea8c5541c8f7
SHA512
68fd293843b203ba2ad1f0f90ef56c8945f51294e845e1a874d5b0511899243812561a3fe69727189b9848aaca145ceb7eb827c2e553acafd7d5c3aed86c097e
SSDEEP
1536:MhBRVgrExucMUNr6xy35q2TaCl8Zb4hp40Ff:cRRs4r6l2mCl2b4VFf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9553603f7601ad12ab6b8a8c23e11750_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ