Outt
Sett
Behavioral task
behavioral1
Sample
a5cfd71ce8ea5e5ee4df958f5920a63d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a5cfd71ce8ea5e5ee4df958f5920a63d_JaffaCakes118
Size
66KB
MD5
a5cfd71ce8ea5e5ee4df958f5920a63d
SHA1
fbdb38d4e94df61bf297d742bbdf3557cd15905c
SHA256
3013297cd248310366af03c51e2e9b0da0fe4be7721524148e33935701be0458
SHA512
7d5976345c19ca5fac1d0b3eb9f974de6eeea6d26f24f1ea3b2ea6165842a483be8bc2d5a0268cf2e71663a269f8af229adf422c87fd4b49292e7cb97efd6d18
SSDEEP
1536:evVaHkVE6k9V5KbeECTryLJqnRYDbMBhYBVzoXLbhz:eW6cKCxyLURGVB0Lbhz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5cfd71ce8ea5e5ee4df958f5920a63d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ