Outt
Sett
Behavioral task
behavioral1
Sample
9615df152aa7935a2d390fe230d0940c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
9615df152aa7935a2d390fe230d0940c_JaffaCakes118
Size
81KB
MD5
9615df152aa7935a2d390fe230d0940c
SHA1
295e9e16f8d692665f03da0dbb191daea0c56e02
SHA256
012d98ad2a70551466262366e7d4a31745adb57708580eb9fd84444b9efec8d7
SHA512
791f68e62d809e9ab092f388e069c25f631ea07bc520acf85e7b864bc86567b3b540120e3e4d76e47f7912e1a586ea0a17302a2fb03329ac0202772fb157dbdf
SSDEEP
1536:RVZ/PpUjP4BBBz7N+ehcYhB+MXSUyfGbGL9uqtImk6+17IoHQ4K6C0N5sv:TZ/PGjyBz7kehnXpXSUyUC9ubmxg7JHI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9615df152aa7935a2d390fe230d0940c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ