Outt
Sett
Behavioral task
behavioral1
Sample
b0aca3d8f51096d12fefc28d9bc1dbf5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b0aca3d8f51096d12fefc28d9bc1dbf5_JaffaCakes118
Size
47KB
MD5
b0aca3d8f51096d12fefc28d9bc1dbf5
SHA1
32bdefe74104d55a7e5dd4bbeb99070ed3d610a9
SHA256
1581867c783021bffabfb4b289416a4cd7dd931a2bf28ad8af000d6d65e51a81
SHA512
4e66b23d905f9c906257806f53a84869b052e0179c4ba69b987c3ea8eb8a6515dcbb79afd8323ccae3faecebf64bc01a3b88bcb561cc14e6eea93e2326fc2a40
SSDEEP
768:/um3QOB2zRkEV0qApVNV0gT0nzkCLxlwrjvLJZ/oYPFsl5/+lIYtM1k1ElAL:mPO6KEVbsVP0gQnzkCLx6vLLgYPFsf/8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0aca3d8f51096d12fefc28d9bc1dbf5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ