Outt
Sett
Behavioral task
behavioral1
Sample
b01598e03f47eae73712626eee764b92_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b01598e03f47eae73712626eee764b92_JaffaCakes118
Size
59KB
MD5
b01598e03f47eae73712626eee764b92
SHA1
53ea6aa8b6a735e394254b1a9b83a64d2a348b7a
SHA256
ad3f4013fa72cc31ee3a0bc82d3f651d2c4ab2e365c2795f3c859508e962d46d
SHA512
9ecdf3c9dfde3dc6fc1af8588cf27cf9224ad952bccd71d18ad25fe768de84861a765925e2c0e39510ea8ea144a83cfb8fe314ac9e2cc0a4e41e83ecf4dd93dc
SSDEEP
1536:EGURbcPvo5mLDaT9SsiIDzlJJiqRbXKzVB:EGURbcPQgWuINPiIbXKzz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b01598e03f47eae73712626eee764b92_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ