Outt
Sett
Behavioral task
behavioral1
Sample
b9e417a1ff82adbbba25640907d5a5c3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b9e417a1ff82adbbba25640907d5a5c3_JaffaCakes118
Size
57KB
MD5
b9e417a1ff82adbbba25640907d5a5c3
SHA1
50a86abc2289089929dc57b134b5f722a4daec7f
SHA256
2b1276e57fb1e6f86953dfe1296f596d05364c5ff71ff3e24c798f2118082bfc
SHA512
9af8d9e12688d254e4e01790f90df820233d1db336795af04b19d3a19863c6fac7127f63908ed8f8f5cd31ddc813d30bb3ec1720304ed007e89b575d8d61e2d7
SSDEEP
1536:kjRURODLwVVUNBI76LkMUzs3H9AIBDj59nbvBI/cfVyA:kFSODU/emuR3+gl9nF1dyA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9e417a1ff82adbbba25640907d5a5c3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ