Outt
Sett
Behavioral task
behavioral1
Sample
c01e1552d4be750e35c3a67f4290b985_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c01e1552d4be750e35c3a67f4290b985_JaffaCakes118
Size
63KB
MD5
c01e1552d4be750e35c3a67f4290b985
SHA1
718474f521b01b9989e88612c5d0d98ecdbf7536
SHA256
dac03e3365c5ffbdc98a888b39b618b2a76cf972d2ea2f1db584048b4418f683
SHA512
e5fc54d586545f71a81f87fd299cda8e9ee422a9ae664687797e4819ec075f5e99f4a13b33fef608339581ec704539f133af3c963c13304bbb910c46685db748
SSDEEP
1536:8xdfzUO04U6mbVRMgk7mlQRfUPe2Sp67JFQuCjauP:uxzUUHmbNkZwJ2uzS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c01e1552d4be750e35c3a67f4290b985_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ