Outt
Sett
Behavioral task
behavioral1
Sample
c0d17682bf261813a7162fafda4ffe17_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c0d17682bf261813a7162fafda4ffe17_JaffaCakes118
Size
80KB
MD5
c0d17682bf261813a7162fafda4ffe17
SHA1
0c67f85e59266d0f06375b7cadc4713280180e4b
SHA256
427de2820e616e843283c460609d0c22314095f81108065cbf2acbfc33ed2cd5
SHA512
3f5b5e08a248659b3ced76c37f92a8697694e8f096f8e29f839d32efb44baef864a71c690a372e845b2a047257e17131d5cf9cc95b958ed2ef7e4481b7fecc8d
SSDEEP
1536:anRxn5qgauuaiveKynAv5eElZjp7/GKkELnAuoBv7stQRzweJUfui/pVT0Da:aRxn8ghurR4AQEHl/GsoBotQzweJM0Da
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0d17682bf261813a7162fafda4ffe17_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ