Outt
Sett
Behavioral task
behavioral1
Sample
a59951a3fe2bedb0bb1ca34a7235203d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a59951a3fe2bedb0bb1ca34a7235203d_JaffaCakes118
Size
50KB
MD5
a59951a3fe2bedb0bb1ca34a7235203d
SHA1
7d48ad3595c192044ec283e407d47456f0bf92e4
SHA256
ba6e7ffb95e50a15b5deedf5d9760ee6444e33bcaed0319a3a96e646701c7b3e
SHA512
b9af5f267b84ff8b79e4ef21ed25dd7280157466f8953d9703f05037bfbaf527e8cbe78e24eb11129c89d24cbd9f3ba432acd1691ca8afabe0732d7ed4a38a69
SSDEEP
1536:MhBRVgrExucM0dY+1XwlBBe6xpi+uHR/1Xg:cRRsSdYcX+TUbB1Xg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a59951a3fe2bedb0bb1ca34a7235203d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ