Outt
Sett
Behavioral task
behavioral1
Sample
b612ace55e93ede079f568f1bce38f87_JaffaCakes118.dll
Resource
win7-20240729-en
Target
b612ace55e93ede079f568f1bce38f87_JaffaCakes118
Size
62KB
MD5
b612ace55e93ede079f568f1bce38f87
SHA1
4c13382d24371624ab9e81c63875fd6783328940
SHA256
4d1dfb39ab64c3f73406bf20c6932d36a950b0d54157f054971dc062e0f4e3aa
SHA512
55f59bef0da6c6dbe1b81bb11694b66d0c8c2b9bfd8f851bb55dd3f0476878e99c965c75f06d68ed0c46bc133b9b23cf8c756d58fcd19630e1f9c9290a78ee76
SSDEEP
1536:4xFcH1W3/uB6PPxb9m26dmadg3Us+97fIHF/FHJk:YQWPy6xb9m2mfuX+5wHF/FHK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b612ace55e93ede079f568f1bce38f87_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ