Outt
Sett
Behavioral task
behavioral1
Sample
a03a41d9faa44ff2eea72af97b01ca56_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a03a41d9faa44ff2eea72af97b01ca56_JaffaCakes118
Size
71KB
MD5
a03a41d9faa44ff2eea72af97b01ca56
SHA1
20a598269b9ce424a9a5607dc8699df654343401
SHA256
08f5b62caf55160cd35d11aeb3a3792dcc5faca0015d06da4f4d63db608130ad
SHA512
e5306f3655e4443bdb7405d1bafa98b86897686be6228a569ba6eb10a09dbb0c0a503ccf81957aa970a87b4cb23e89c559db210995be23d84a0c49c2b42b34be
SSDEEP
1536:RVy0g82UU4L3bsCUMqZ+7K4czTx3SxzKdwKr5hjVtg/wJ37kv:Ta81xL3brUMqZ+m4czT4AVtg/wJA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a03a41d9faa44ff2eea72af97b01ca56_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ