Outt
Sett
Behavioral task
behavioral1
Sample
be9aaa30062e1df8862dbbff60efe289_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be9aaa30062e1df8862dbbff60efe289_JaffaCakes118
Size
52KB
MD5
be9aaa30062e1df8862dbbff60efe289
SHA1
21824de8065946eb300008111ef3645112141bdd
SHA256
79e4b9bcd400cd52b1fbff03a1df9abce74775e4aff59d84d718a8595f6ea1ae
SHA512
f8a2dd0f5696451610470ff6685a220cca1531bf4e2cfb20cc745fd94b734fcffe45f620bc4349b5c9beb062b3b9c92411158ee7ba276d33988ec15fb0ef0b16
SSDEEP
1536:anRAydqeonni/iIa1ImV+54TlG3xCyoVs:aRue2nk3OIme4Y3xtos
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be9aaa30062e1df8862dbbff60efe289_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ