Outt
Sett
Behavioral task
behavioral1
Sample
cf4563210ab4c7c75e9c806dea67f118_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf4563210ab4c7c75e9c806dea67f118_JaffaCakes118
Size
59KB
MD5
cf4563210ab4c7c75e9c806dea67f118
SHA1
69809232cfcbef54e94375908ea885442835f71c
SHA256
01a8a72bf3d561cfa0ad0f778b81040cadbe3f3824c9c42495b35c8ba4b304df
SHA512
4deeab92a8c4cb37e2c2918692bfa51585130399e6ffc28a54f51e0f8a8b7c7f5bfb5d9871d2b8f18f79fb3b484033a726b2b5889ee0686fab94aa40e8f7ea9a
SSDEEP
1536:5jRmOx8DkgULcJjbvaJ+yOQPNcY6ALxsDVi6Y:xfmogOcJfH01cY6ALxmQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf4563210ab4c7c75e9c806dea67f118_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ