Outt
Sett
Behavioral task
behavioral1
Sample
d0b953d5757e60985278609595e277f9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d0b953d5757e60985278609595e277f9_JaffaCakes118
Size
64KB
MD5
d0b953d5757e60985278609595e277f9
SHA1
76d188945df9bd80e3e3f8d660bd8ed17921a21e
SHA256
246bb98e4c1605c5b2441fd472e0412e4398e5ee8cce4e6b8a99223e25c5cdaa
SHA512
42f49519a7088d7a39c8afa9728525f941b0a0335e9cb15e292c0133408fadde6e5fd08b4bf2b4721c3c6cbd37538dc86981949b436d6b2096fe3fc96a6be4be
SSDEEP
1536:RVMaZ4fQZkQdU/7ltnwg1POOkgP7iDRTE1ldzWRS:TMaZ4fQZTUTltnwmPvkGiDRTeWRS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0b953d5757e60985278609595e277f9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ