Outt
Sett
Behavioral task
behavioral1
Sample
c05063ad06711d2c220790a9ffd268a6_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c05063ad06711d2c220790a9ffd268a6_JaffaCakes118
Size
63KB
MD5
c05063ad06711d2c220790a9ffd268a6
SHA1
37085252452ad1ae7e66fad5208292b5d12ddb83
SHA256
264c57c9a79c06c6b6931ef35549df72b987fe4f4dabf7041da42a1425e33f19
SHA512
cab660e7cd5ce325ce0d67aaa3a9f7e4cfe5ad4d33f1d1556bcb6b73b1a4d77e46241210dbfdfe412147f9b28be5c22a0991d148244091fcd81782120de36185
SSDEEP
1536:mPO6KEVbsVP0gQ+uuFg15RFACxcsjZLwOc3pBdaE:cMEVbsVcj+Tq15DACxfjZ4BZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c05063ad06711d2c220790a9ffd268a6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ