Outt
Sett
Behavioral task
behavioral1
Sample
be03c2083ed97aabc9b6aa861d5e7328_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be03c2083ed97aabc9b6aa861d5e7328_JaffaCakes118
Size
75KB
MD5
be03c2083ed97aabc9b6aa861d5e7328
SHA1
58bc6402ce41d8339fe247bd27cc867d3e37338b
SHA256
e046e9c7770aa2ca9d4aa3fd6e9468a28c7daa98209241aec5fcf17b4456635f
SHA512
d3523e45725953a96661e2302ac1e82d897977cab0a5cdea40db553a1c4679b5bb4065ac36c5fb247c2aead73519b5ca86471a9ab4bcf683d2da1f5f674c932e
SSDEEP
1536:1zExMwCGQ2j/0Sthv57zvjpsA5tUepd9r5bBU1S58DN2PUYYm5:1I+wCGvj0StbzDtZpr5bwm8R2P5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be03c2083ed97aabc9b6aa861d5e7328_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ