Outt
Sett
Behavioral task
behavioral1
Sample
b97e5c461315047e22256899a011c3bd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b97e5c461315047e22256899a011c3bd_JaffaCakes118
Size
56KB
MD5
b97e5c461315047e22256899a011c3bd
SHA1
5d1d8a00d79b14f39fb6921f224cf64ee86f309a
SHA256
2a179778e0906971062ebbf399ce0fbce24bc4f13d7ee02a6504e01af6dbf259
SHA512
db676696b216465a2dab3f3e2926832cd1d1d2005525c4fec668a55892ab419055e83c2dc5ca4c8aca04e845f1ff100798b5d110d32b5d85fd62e3126448fd43
SSDEEP
1536:V2bHwewEfyvl8KaUCQpmfaLRPFgSx9Rjjny:WH96vl8ACQpmCLhFgGjjny
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b97e5c461315047e22256899a011c3bd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ