Outt
Sett
Behavioral task
behavioral1
Sample
ada748aa1a3bfce954b37e6faf4223b1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ada748aa1a3bfce954b37e6faf4223b1_JaffaCakes118
Size
72KB
MD5
ada748aa1a3bfce954b37e6faf4223b1
SHA1
be83adff13ac8a224243866d7d696c456a4ac82e
SHA256
8541c89dee58249e6ccfa3cc59f326e081ef5fcee8869d0941cb53ad86742b89
SHA512
e31f5c2f9f58390521a2970d10d4803eeba5db03851dc4e3b7eb2e0d174a0f8b097509934a834be426a8670a7506ae5e42c63fc6476949b0406af3f7b3f9fce6
SSDEEP
1536:Bm1NGJVG633eP1s/VD3IS0g80epnPH6IYWRPxojF/Gz:kX0Vz81sdD4S8nPH6IYWJxojF/Gz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ada748aa1a3bfce954b37e6faf4223b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ