Outt
Sett
Behavioral task
behavioral1
Sample
d0924a76996d55fbae001d71f5772afb_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d0924a76996d55fbae001d71f5772afb_JaffaCakes118
Size
58KB
MD5
d0924a76996d55fbae001d71f5772afb
SHA1
4b437ae5d95a74b7c4d9a24231c580ffbd53b83e
SHA256
11751cc4e540da8f8adcbe2def6351d8e80308433434a80fd7ffdcaa84b030e1
SHA512
26d63e9c096b5db584e2754e58f23a807c53c07b534443ba015107286b0032d81c822a8dd86540e436b077321c155cae489af96407b38c1cb4eb9a53edec1b61
SSDEEP
768:nbY4l8EgPJkB7bHSbAJZC4IoiCrUj6hnnhbTgQykhc+Lqzx+7nzc3Mb7XWEijiuC:EGPgaB7by+Z1IoiCe4hbThzAEXWEiApP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0924a76996d55fbae001d71f5772afb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ