Outt
Sett
Behavioral task
behavioral1
Sample
ad6c809d24ce02aa5a9f336b43b83b1f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ad6c809d24ce02aa5a9f336b43b83b1f_JaffaCakes118
Size
58KB
MD5
ad6c809d24ce02aa5a9f336b43b83b1f
SHA1
dcb43eee5995f5e97b5176f2ea0fd79bea866836
SHA256
cdc9f2c926f118b0df13f75fa412f97eaa52819d5685aa1498f246a077be7dd6
SHA512
88db91808df7d3b809817fb246afefef16f78ddc389877a14340f0de22a7b5d0348ecf1641d6068167dda2bfaded9b137e00f509c3a4ad5f420da70e607ae9de
SSDEEP
1536:EGEP5ZK+/ZwtNmAesaUundyuXCg6eHu1Kz3EjsbfXOT:EGEP5ZKv5udFCHesI0jsbfOT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad6c809d24ce02aa5a9f336b43b83b1f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ