Outt
Sett
Behavioral task
behavioral1
Sample
c2a4cf76654183392533fa13275a96c2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c2a4cf76654183392533fa13275a96c2_JaffaCakes118
Size
47KB
MD5
c2a4cf76654183392533fa13275a96c2
SHA1
f0cd8cb99b8923cdaeb35c9dda4bf94f217b35e8
SHA256
5ce41200a6fc96d6ebf536f87c7a736e5e2e2d2c9065156088e67e63d835906c
SHA512
a8fa9bec2af664347bca16dde11c9815e038c4af0778d3aa2bd42011b4a34a7cc494dc78e68f846e17987fbc781d630b11f7e504c13ec62575d4335ec01ca159
SSDEEP
768:m+YlPqpYYiD2TV6klylHqTRCHpLJTxW70/tdaKIj1rWl5ddz01oWoKagPC:tGSZ6BORCJLhtd21rWl5nQymaCC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c2a4cf76654183392533fa13275a96c2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ