Outt
Sett
Behavioral task
behavioral1
Sample
d0f61320e0ca4c5545dbd8d6b4b4ef89_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d0f61320e0ca4c5545dbd8d6b4b4ef89_JaffaCakes118
Size
64KB
MD5
d0f61320e0ca4c5545dbd8d6b4b4ef89
SHA1
b211075ad8f759bf765fb1c9db896a6c636fa264
SHA256
0ef6d98c8290934287007aef5a62f51811ebf7f8c22a10c8a7af75e3572c6f48
SHA512
7fa3d2e9d711cc2560f8e46c82d15dd9b100176ac43fe3dc37c8be9c7c70edc33bc9995bb8fb58f0e89c4ee3f86b3021d7897a7df47d7e23cc113affd143cff1
SSDEEP
1536:5jRmOjWhYhdcEEdDyq2O4hTTo6nybjXtyXbK9qEEW0Z:xfjW9EEVL4hTTo6nyIXbjlWM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0f61320e0ca4c5545dbd8d6b4b4ef89_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ