Outt
Sett
Behavioral task
behavioral1
Sample
d2e27b83199878c968103bc12d49e51f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d2e27b83199878c968103bc12d49e51f_JaffaCakes118
Size
63KB
MD5
d2e27b83199878c968103bc12d49e51f
SHA1
8e34265b365b9f77524c21b1f631feb8196770ea
SHA256
6730fcccf0256585d0690fd521708dd51e626c96fe7d36b51dd1f4c29e1b0693
SHA512
7af01b645e66e44332f533804a4e450818d6df4a1d5f0c396314978e0fa9e2b7bfa76e94b7dd44e7720c0faf3b3a94c1f0dfe76106605e57389fbcf6af914b65
SSDEEP
1536:V8O9Nn6Rjri7UNEo3BEkpGaS06Rn3mNhEFb+8BJO2kW3:2Oz6VW7UNEo3BBSLMYbfbO2J3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d2e27b83199878c968103bc12d49e51f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ