Outt
Sett
Behavioral task
behavioral1
Sample
be46445513ee80d78fd9e822c4aff362_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be46445513ee80d78fd9e822c4aff362_JaffaCakes118
Size
68KB
MD5
be46445513ee80d78fd9e822c4aff362
SHA1
fe1413e359d3561d559b937c6e6baca27e8879dd
SHA256
04e08b75f76ecef2e9263e58db6e6e5f7a334e957cce299ac7d867326ea9f54e
SHA512
de5993799374631f2410b4db08a93c30fbb9ab1435de059011f33251045917af6e004860f1f5435778f47d61946d924385a49772eb2d7cb6c68b56db765d1eb8
SSDEEP
1536:1zExMwCGQ2jFoYzKT1sSKq8CfdTUZvRubKDQ36MA0pzRNoZk9FmP:1I+wCGvBoYu7KAFUZA336Mjp9sWFY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be46445513ee80d78fd9e822c4aff362_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ