Outt
Sett
Behavioral task
behavioral1
Sample
cf532015ca5629f61ffa70cd82639f1a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf532015ca5629f61ffa70cd82639f1a_JaffaCakes118
Size
54KB
MD5
cf532015ca5629f61ffa70cd82639f1a
SHA1
7b2e28cf214e13503aa520d538fc9fc0277a8043
SHA256
35cc8da172e5ca4fd7954efe0dd2f89fdb01f00c5f8e1c3d5fb472e61a7cc582
SHA512
e9435c9104d823528ca5cf44c0ff45198417350ca9486c4bcc7717535913312655a76c5c8db38f93b94cba324804597c2a67d3e9d7c63fd32da842f973ca0c35
SSDEEP
1536:s65kur9+8JrMcG8DjmO9xIrfJEB3dPBI3PCaZxNBPXD91R:trMgrHfDjmO9xIrJEBNPBIq4VF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf532015ca5629f61ffa70cd82639f1a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ