Outt
Sett
Behavioral task
behavioral1
Sample
c20330c2a0571ab7940fa179cfc869b1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c20330c2a0571ab7940fa179cfc869b1_JaffaCakes118
Size
64KB
MD5
c20330c2a0571ab7940fa179cfc869b1
SHA1
a7aea2e11aafd8359adb163e1760345d98995a15
SHA256
1a878c52227e997d4475b122110e5f55f19b1a2c2b7e51927e90d25d1719ec3e
SHA512
06a3712b878e9320894c0633e03c6aa4c5018b92ce0ffec6ca340440d64858db047bfb7eb7971912140562acbcc6917bf53df0b54d1401266a36603f2608069e
SSDEEP
1536:yl3E0TwLzlNd+bklSKvY3pkFe2xOQqeT+Z:E39yzlr+bklA3GFZxPT+Z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c20330c2a0571ab7940fa179cfc869b1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ