Outt
Sett
Behavioral task
behavioral1
Sample
b00954fc11213a7f71ba90bef3178707_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b00954fc11213a7f71ba90bef3178707_JaffaCakes118
Size
62KB
MD5
b00954fc11213a7f71ba90bef3178707
SHA1
f42a911d7d17149c6202e58aa63742b5e46a5903
SHA256
977d22332604b89848b4b74aa1e0f8d8b464b1272f38c1c82b129c97bb17bfa0
SHA512
ea62077d99489f1bc09404c6d46a43f0099773f26355176d3aed262dec593a5d2b789a22b56dbfdaac2f0ea3b25adcfc01ddf8791da594d2e4707d5f363bd221
SSDEEP
1536:mPO6KEVbsVP0g8MBxAqf/LZeMElnEwzrNYrwKfybBeIpW:cMEVbsVcaBxAq3LZgnEwHNYctde4W
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b00954fc11213a7f71ba90bef3178707_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ