Outt
Sett
Behavioral task
behavioral1
Sample
cf20992ddf4aac36efca60b5eeed8346_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf20992ddf4aac36efca60b5eeed8346_JaffaCakes118
Size
57KB
MD5
cf20992ddf4aac36efca60b5eeed8346
SHA1
39f1b109a9d2a2948a591b76f0c8664b0a9dd0f5
SHA256
12e0c5f8d7f9890f4b93ada9de7bc3ae08fd76fc2b4c85d658ff7563297ebfdc
SHA512
d4b1968103056f89e8f9f6ed468406076e6fe5cda5cd01fdde54486ba26715a12aba761425e7462f0f1f70a7d6057368eed08d9b98fe270600e5d60fc63fd154
SSDEEP
768:56IRmOOuH6NugDU1s0yvIMCMxu9Xg/vALJjL0rZ2fOwh37XPc7QYvruHrOo3N:5jRmOc1U1s0qIMRcg+g15wRXODayod
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf20992ddf4aac36efca60b5eeed8346_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ