Outt
Sett
Behavioral task
behavioral1
Sample
b02b1049664551b025abc068d4275209_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b02b1049664551b025abc068d4275209_JaffaCakes118
Size
53KB
MD5
b02b1049664551b025abc068d4275209
SHA1
aa669d555ccd8b1d150935aaed71d48cfe50d2cf
SHA256
141892c62b4c0b9f0c189c6fde28f996384c066215f07498dab1aeba3459ff55
SHA512
25821211c0a0b0add7a5d914fb3a0582ef3502e1795429193708625b432bc38d3816e1306cd1bd2c056cc05b73f59e18833bb37cd7b377b50b5e6ce9b2eb3a14
SSDEEP
768:yuUr3ip/IHI7NQTvGih2CmQKVBmNlg/ZsCZCA7hjlNRKfceeV6CLsUil32wR0Pov:yl3E0TenCmFVcNe/nZCGNnsU0Ge0Pov
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b02b1049664551b025abc068d4275209_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ