Outt
Sett
Behavioral task
behavioral1
Sample
cf5ca3cc0e0f9496f0cc12d1af15a916_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf5ca3cc0e0f9496f0cc12d1af15a916_JaffaCakes118
Size
72KB
MD5
cf5ca3cc0e0f9496f0cc12d1af15a916
SHA1
8c961684f2914c7069b6a822839e87d0d6a5e5fa
SHA256
5be9eee06582b59c0d50f606fd25413740dd7ca7c6a7908c2765cf0b75b54a3c
SHA512
c008dab91f4fa692a78a1e3941c0bf7b58dd2bfec517e21b89ad238a5680ec4f51e3c581eb99126264c7f9c4d09c4bf24beba377e2f72f5a4fda4c599fd07720
SSDEEP
1536:1zExMwCGQ2jzoiE4eLFE8nm6Zvl8h6V1AhngtNMLGLPnGAn:1I+wCGv3oiYFECVvlB1asNB5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf5ca3cc0e0f9496f0cc12d1af15a916_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ