Outt
Sett
Behavioral task
behavioral1
Sample
cf116cd33ba18d2de5a968fbfddfd33c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
cf116cd33ba18d2de5a968fbfddfd33c_JaffaCakes118
Size
64KB
MD5
cf116cd33ba18d2de5a968fbfddfd33c
SHA1
be1b5d9458dc1c1d23d7b00d30262dd20754a3a2
SHA256
3d3632650dcc6d1fc6a2337aefe1a1ba64d89a3ce78f2bc85b55bc6c6e64730c
SHA512
92aab12a14f0401f00a61ca9dbd915a37329550327738b3e7d803def6a9fec6568fcee17c09cc6a4d5b2ad9bdb671db021e34b31892df68483fa821ca3af1278
SSDEEP
768:m+YlPqpYYNCkA6DSEGLS2wcDUgDuDy8e2Y0kwj1x0JcuA6xCXaQihSUFfdk7OGKz:tpC2DSBnDUQuxnx0JcuADNUXyne74/0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf116cd33ba18d2de5a968fbfddfd33c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ