Outt
Sett
Behavioral task
behavioral1
Sample
ce731086ed65b04155fb2c7c1a67ddda_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce731086ed65b04155fb2c7c1a67ddda_JaffaCakes118
Size
63KB
MD5
ce731086ed65b04155fb2c7c1a67ddda
SHA1
b7cfc573affb84f1917ef4c3e508220c49ce4d97
SHA256
784e308f5ff8524d95fb49dd3a78207c50d494d369f00c019fd3a8741af808fb
SHA512
ff0b93629c5035caafd062aefb0b606e48997098c67f94f27c929b8a3b8963f93fefdf45c0948e710842202b7c828cea198c22a03333052c2ea421aed73135c4
SSDEEP
1536:NGWJoj5DJouSR2c6rPilN6R6DZQLRvCCAG7Z8:rJojTo/RQrPilN6RqKFvCCAG98
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce731086ed65b04155fb2c7c1a67ddda_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ