Outt
Sett
Behavioral task
behavioral1
Sample
d035a2e2ea79c19de1df88daac70acf8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d035a2e2ea79c19de1df88daac70acf8_JaffaCakes118
Size
57KB
MD5
d035a2e2ea79c19de1df88daac70acf8
SHA1
2227cac9ef897da2709ad2edd39ad896247e2d59
SHA256
210c43203ae0e54fa019fb034bdf1444ed2180f792a25851016f612adfed2580
SHA512
40ae212b3b391cc9ca35ad57c1aa199a880a00148d1d7f1bbd495b80bab6d2d0f29824d496db87538477bdc9ca54358c53fc92b0f0921dcfa33c6a8daa3e90eb
SSDEEP
1536:evsC+2XcKtz2FeoTnOI3GAC1Z5075tfKJU:s+2XcKl2FeoTnDZC1OfKJU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d035a2e2ea79c19de1df88daac70acf8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ