Outt
Sett
Behavioral task
behavioral1
Sample
cf7426b3836e9a445d7671cda777da2e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf7426b3836e9a445d7671cda777da2e_JaffaCakes118
Size
56KB
MD5
cf7426b3836e9a445d7671cda777da2e
SHA1
120cab27f10f5f9a65e28d06c0322843042a977e
SHA256
5a9af60b6070163260e483111149f5f06261a38c564002f90775bda3763d3be6
SHA512
a5219d27d85c6f71494a35248f943c12d2c8aa762bbd57cc624bda8c0710aafd90fdb26d718a77801515751d105f3f5e1b91dd5df9cd0e9b8a1c6b11b8dbc8f5
SSDEEP
768:h8WTpVT0X8zbOUutcq3CoG7wvmZCUYKAFscqt5trE7z7rcsU73olTBENeLSz/xVe:RVf9q3CPwvA7Aypt5FKfrcgeZnWR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf7426b3836e9a445d7671cda777da2e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ