Outt
Sett
Behavioral task
behavioral1
Sample
ce5cac2ac3d088ad2f8c468933df05f9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce5cac2ac3d088ad2f8c468933df05f9_JaffaCakes118
Size
65KB
MD5
ce5cac2ac3d088ad2f8c468933df05f9
SHA1
94fe612d92c36416da31caa03f7f612d4675edde
SHA256
34fcd8e7b5f6ac3da95cb64ee1befc1dfad0f776af1b83575459d93648f9c440
SHA512
27843efb6a95bd5f94882f4c755d54dbfbba0102592387ec3c9e338074ca6bba805449d21b94234d362d8b01de7b1ac0810982d620940e40293f6069881141ac
SSDEEP
1536:GQ3tfgXK9L/2TB7kdIN6V+h9l2BcVJ9fh37Xg7vK7s:VfgXKMF7kd8Zh9l2o3fh372
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce5cac2ac3d088ad2f8c468933df05f9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ