Outt
Sett
Behavioral task
behavioral1
Sample
ce909a0b4c145831d611aab160bdefa3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce909a0b4c145831d611aab160bdefa3_JaffaCakes118
Size
68KB
MD5
ce909a0b4c145831d611aab160bdefa3
SHA1
bcf9f4213ea00b9509f0447906f56f0c24893278
SHA256
147f7b1bfc7b80ba69ff7e5154d1bbe347ac488ce1fbad6f6fa0b6c9d4354333
SHA512
60a98f48a8dfec4f1a196771da49343deccb5897e6386514763e5d3a82cc1f07ee7ff3a6d7f0faa9279c5990dafeed6b08a45a3f7f23ae0c7e70da9eaf6125ff
SSDEEP
1536:jZIcCxRxGW+kgxctqHMIjt4Z9Lgdye+oaNDqfG:x+OjkOctqsIe9Re+ZNDqO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce909a0b4c145831d611aab160bdefa3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ