Outt
Sett
Behavioral task
behavioral1
Sample
c8c90051c72882542bd662a01fa57546_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c8c90051c72882542bd662a01fa57546_JaffaCakes118
Size
50KB
MD5
c8c90051c72882542bd662a01fa57546
SHA1
7f104292b3f4059103c81c21dfc105b0e279c158
SHA256
73cfe8a7c49521b9cf21e8a46db94733ede5b355495b11945ae97cba1a31781e
SHA512
227f34dd3394d6ae0493df39cf24ed2e1ce806bbd1bd128ec8d3eb6548e74e0318c20c2df2518fe091f4e8e5a560c60357dfacdcdf6650fc856eacc2e102d797
SSDEEP
768:tCY2IjwRn8ILhLvlqOkXbDl/cfXByEvdYfC10P/Ebd1x6b4P8eHHNifd:tl0dVLdkr5URLFSQ0PCab4UenNiV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c8c90051c72882542bd662a01fa57546_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ