Outt
Sett
Behavioral task
behavioral1
Sample
c1e5ac80f75a5162da5b475f48690586_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c1e5ac80f75a5162da5b475f48690586_JaffaCakes118
Size
70KB
MD5
c1e5ac80f75a5162da5b475f48690586
SHA1
5003f3bcf4075c93c866e1a2610a2c379767a986
SHA256
2ed1ef67323b47a458347c811f77a5d38d88614e78378aeee0268491f8cd62f5
SHA512
fb4fa230de4de2e876e7b3dff3e654adc115ddca5c87b504d24a7d577ee833e9a5e0dd39191f5942b9ac4d730b606af46837d234310e70650feeb335fe6ebce6
SSDEEP
1536:23umoMtxjeyhwk602/wdIe+ABcASlKrt41EYXtAr4iLJR+JHZh:CoMtxjeyhw90tsA3Sst3MGrTVgJL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c1e5ac80f75a5162da5b475f48690586_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ