Outt
Sett
Behavioral task
behavioral1
Sample
c027c106de31400d19ad156c7b146cea_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c027c106de31400d19ad156c7b146cea_JaffaCakes118
Size
62KB
MD5
c027c106de31400d19ad156c7b146cea
SHA1
2c680c1fc1398e9aab4f761f685b8a9f88075141
SHA256
4069d5b24d504136b8233378297c09e84e9bfb0ca47e45ee76e374cac77bd8ae
SHA512
775727cec40946416fff80e184c26e6b246a0dfcdfb736a91841c1d92ad77c78f88e334a864cdac28a3123cfeda7fa4335588801c6fb92fed1da276f9e33e619
SSDEEP
1536:ev4y3WXHUvmkE4nhVvKhHCrEJ0Z4qlJIo8BQpSNYrc1:NykHYmkEejvKhHC60Z44IoVsir8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c027c106de31400d19ad156c7b146cea_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ