Outt
Sett
Behavioral task
behavioral1
Sample
be3442131b511cec287adb219f0d7c31_JaffaCakes118.dll
Resource
win7-20240705-en
Target
be3442131b511cec287adb219f0d7c31_JaffaCakes118
Size
70KB
MD5
be3442131b511cec287adb219f0d7c31
SHA1
8a0c0574b88b7790985ebb5771da84c54c2fe950
SHA256
41fe05602771f7e8faffab5f8f507f92d583eb52a4c03b88380fa8377682a969
SHA512
725bf2df27713ef20991d9f61248063978ef9d8b344bd53a82bc0dfe8cbb66e0d43eaf6f3fac53e7f86995749b4c65889ac6394d951a394142a7505b2ef94ad4
SSDEEP
1536:n7ZLNPp9pZBMxI17ommJT0Il6L2+I8RLZx4RGaqq7Brhuv9Sn6+sBiak:7ZppBommN0E/+BLZx4RGzSn6vB2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be3442131b511cec287adb219f0d7c31_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ