Outt
Sett
Behavioral task
behavioral1
Sample
cff9e984f4ca9de300dc0efc7cc5c138_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cff9e984f4ca9de300dc0efc7cc5c138_JaffaCakes118
Size
66KB
MD5
cff9e984f4ca9de300dc0efc7cc5c138
SHA1
455d7ddd846b86288586c380bfa9a6f702c9727c
SHA256
4749097b5b76e0a81c033be21b7109a433b5e7b882f6135428b2a314d933cdc8
SHA512
deedd98d749e45928d0cf40b22ab6205e1430ea0a8c4f546613188624b3dfb9023425b54fa27430fb68d4e59536904f5dc80c4706b99baa3406e913eec7d5681
SSDEEP
1536:ev1+dM8XHL/fJIMdAhqtW5KCxK34rCc+FciBSXVHF:vdMMHL/fJIMKQW5KN3hc+FciBuHF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cff9e984f4ca9de300dc0efc7cc5c138_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ