Outt
Sett
Behavioral task
behavioral1
Sample
adde393bf835162f3b3b6fa89b1f0755_JaffaCakes118.dll
Resource
win7-20240704-en
Target
adde393bf835162f3b3b6fa89b1f0755_JaffaCakes118
Size
58KB
MD5
adde393bf835162f3b3b6fa89b1f0755
SHA1
c17f8bbb3d11f54f7802583dbce5af60a2ed4402
SHA256
7f13a9a07f18a1db022aaec7952c6d1dda34b1724d742ac33c010fbbdff1252b
SHA512
aa3cb9240aa7df0857f57ec8c2f7d9265d3915e7e7ff77f78a329ab93db8794956379105a45114ff93de42eb9bfedc8d2b7b893030ece35d24949c401110e322
SSDEEP
1536:cL5cPpbyNo48WUvExwMoQg/rf1AHRiwR0gsRnjmLjE5aAb:cLOPls3gMaTf1UO9jmLjE57
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
adde393bf835162f3b3b6fa89b1f0755_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ