Outt
Sett
Behavioral task
behavioral1
Sample
d03b2c7b2134edb5d04ce0b96a769fc9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d03b2c7b2134edb5d04ce0b96a769fc9_JaffaCakes118
Size
54KB
MD5
d03b2c7b2134edb5d04ce0b96a769fc9
SHA1
2cdc0ab4debfe953c13145f98beab1cfbaf46a72
SHA256
3366621e1c1a1de5680ca1a66a98c1d5af676313a54e073350ad44db52f36841
SHA512
c028d78725d2b87660f3a1b0eef3d2d5a72819033b1fcbc823e258c872092e0e3e82c78409f530fdbf1f9bbcaa33a71e885e060961c0601eeaf74139529faf02
SSDEEP
1536:RVbB4/wEZve3dk4NwZu0ExmJBNMjZ+eN6d:TIwEZQpBmJBNM7N6d
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d03b2c7b2134edb5d04ce0b96a769fc9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ