Outt
Sett
Behavioral task
behavioral1
Sample
adc78548e7f173965fca36881c6ac07b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
adc78548e7f173965fca36881c6ac07b_JaffaCakes118
Size
69KB
MD5
adc78548e7f173965fca36881c6ac07b
SHA1
2e1e375b8c1caa459eb60069e9834a880cba34bb
SHA256
eca57a992329cd15fe471d1fa1c070267432496543c317026c5ed2b10b5fd227
SHA512
6b8683cc031ad49f9f85810c629e358dac5f88facf7dc5d1cb5c8b4948b63eabc12c29008cf9c84a359ca6f07eee907902e10bf471f617f6ad3fd40451d76295
SSDEEP
1536:yl3E0TuRRAtfj4GiNEgO8J/fScRYDZoP72uWm:E39/tfMo0ScRUZG72Bm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
adc78548e7f173965fca36881c6ac07b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ