Outt
Sett
Behavioral task
behavioral1
Sample
be4d8c3eac822015a0cf32543fe80c24_JaffaCakes118.dll
Resource
win7-20240729-en
Target
be4d8c3eac822015a0cf32543fe80c24_JaffaCakes118
Size
65KB
MD5
be4d8c3eac822015a0cf32543fe80c24
SHA1
14ec77d7e3e177df2df0140e2b0e0df864000d21
SHA256
56eb2437af44eaf1506fcf6cb473a2e596f0832f6a16faddee8129e58830bdae
SHA512
a2d6a745b03ff24f200fa1e926afbccca01d0fd260c0b4ae38357fa5f3e2ac26eac797279d401ff14a740ea93eb4563e64cbea1554364e0662069b15702f4fb4
SSDEEP
1536:yl3E0TQvBSBum8U3K8ucdmRPLDauJaybG:E39spSBumZNuq2LNwOG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be4d8c3eac822015a0cf32543fe80c24_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ