Outt
Sett
Behavioral task
behavioral1
Sample
c855dbfd2ce4f06fc94f19cdb65ea0a8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c855dbfd2ce4f06fc94f19cdb65ea0a8_JaffaCakes118
Size
57KB
MD5
c855dbfd2ce4f06fc94f19cdb65ea0a8
SHA1
3c675ea4f01d89944f2040491daeb02f17edeccd
SHA256
139f87faa623f7136f6a89e24dd9e62e8c91a28ec389eb599b907d8321898840
SHA512
df7077c0c20934e6aac73adae1be075f69e497ac410d62e94f892c96d6619b1e09f747b300ca9a7c742ce0ee4ecef72b1f452aca793a2bb63de328c45f5a61cc
SSDEEP
1536:jZIcCxRRBQCPIIOp9euTtqQ6JkveIGb5HA5+aJmrIT:x+1QCeTtqDmjSA5+a3T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c855dbfd2ce4f06fc94f19cdb65ea0a8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ