Outt
Sett
Behavioral task
behavioral1
Sample
d00a7264eacfbfbec2356470b35108d2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d00a7264eacfbfbec2356470b35108d2_JaffaCakes118
Size
62KB
MD5
d00a7264eacfbfbec2356470b35108d2
SHA1
e20b7788768dbb67d9545d72a61c389546bd1374
SHA256
051d2fd1aee53d304d006dd0b2a0274e912db866b449f6596cd2ac3490976abc
SHA512
999aaccc4365dfdcd3e50e62f5bc6fb93f5ac631817bddbb510e2461e06f70d31a78bafad170c3201ac5502792652a9806879723c5289981cc00b670c0a7cbb4
SSDEEP
1536:yHZJpnG5JTrNYPeMCC5LTJnGJ77pOmjkqu+hP:yHlnadrNweF6LTJ877pW8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d00a7264eacfbfbec2356470b35108d2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ