Outt
Sett
Behavioral task
behavioral1
Sample
d04a6dc894a7f99ee77530939005bb36_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d04a6dc894a7f99ee77530939005bb36_JaffaCakes118
Size
66KB
MD5
d04a6dc894a7f99ee77530939005bb36
SHA1
534d1694f170c268aced9d1ca023a7568149128b
SHA256
293fae93e8ee679676372cd0272e8da77d8a19791d240692cf396346c591fcc9
SHA512
36d836c9c90908894a528ccb275a2cf80e60b7816d37cb1f55d8ebc3764c24a6c456c8df03d7c8c3da64d810dfb5a43b282a1ecd5fe07ccf5b684c14b9ff6d69
SSDEEP
1536:2hq93/hF/9KIVdS1cuw3OhcnTGEoXLonIXhQCU09hX+vLyzc57UkUHA:zjdBVM1w4w0onIJU2hOzyzcxcg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d04a6dc894a7f99ee77530939005bb36_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ