Outt
Sett
Behavioral task
behavioral1
Sample
b09d836fac785c91e3d06ebe15035a64_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b09d836fac785c91e3d06ebe15035a64_JaffaCakes118
Size
58KB
MD5
b09d836fac785c91e3d06ebe15035a64
SHA1
808bb668456c206aed552180e903ea85061c7404
SHA256
f51c7aa1ec0704b6154576aabcdcd32dab493881113746839ea0f2b821dbf235
SHA512
336183d9b824136b104f4f1e5e8f9d3f21a68ec33e2be4002db5dd8cf913b1f04ab3888ad72ac37f40072f305a7629078b224d3fd1c949aaffeead8388441f9c
SSDEEP
1536:MhBRVgrExucMoM0X+ZXTlNzNFbniWvEHnAwTu1AdA1azfk:cRRsiXX2lNzNhnTvKnTu1T9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b09d836fac785c91e3d06ebe15035a64_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ