Outt
Sett
Behavioral task
behavioral1
Sample
be4312c92061b45f656be3b00f8f3e5a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
be4312c92061b45f656be3b00f8f3e5a_JaffaCakes118
Size
57KB
MD5
be4312c92061b45f656be3b00f8f3e5a
SHA1
2f0a93db29c9a0110d75b81c1d426370f9a9959d
SHA256
93410cd4701f3045855d2d550533ec940d2bdd3ecc19396fb63e01bdb80b7ff0
SHA512
570c86628ce7ab596234d4f2a3663ba884cac53e1148a38d14af168a8c27cc4c7c4829ebc7cfaae1f0aa0bcb7c2ddfc492a726529de592f0c6b8659bbd258077
SSDEEP
1536:kjRUJ096qWkiVLvOwuUIagblnqqru+96wroFUPG0wm:kFxDipOsJgblnLN9Fo+Pam
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be4312c92061b45f656be3b00f8f3e5a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ