Outt
Sett
Behavioral task
behavioral1
Sample
c1fd488b6ff832f596f1c40b343f0a52_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c1fd488b6ff832f596f1c40b343f0a52_JaffaCakes118
Size
78KB
MD5
c1fd488b6ff832f596f1c40b343f0a52
SHA1
e7c16797ff1a9378ebcad535ac6159d4f6202afa
SHA256
55a7fac8263a0379ec27a369161093b5b536f0fb4f02d17c3f3ce30bd46b8e0d
SHA512
5b23824e303c41e2967a85a0f0951dd3c9fb6f45a6a8006bdae7d2aa183c60ad4e804e0a4efe47263ad38c54fe13b928becc2f4d60ad7a3fa54a9fa9adf05716
SSDEEP
1536:Bm1NGJVGFbBBVHbTZHyAisj6dbSvxrkN8Xx2oc9iG2kJR0:kX0VgdXHNiKSS9kN8XtxkJR0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c1fd488b6ff832f596f1c40b343f0a52_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ