Outt
Sett
Behavioral task
behavioral1
Sample
d109fa4434fcdf9f05eae914e1bd8dec_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d109fa4434fcdf9f05eae914e1bd8dec_JaffaCakes118
Size
56KB
MD5
d109fa4434fcdf9f05eae914e1bd8dec
SHA1
c8676af81df5b54b50d3362eccf1781042149ab9
SHA256
244c4c5e07233890d8bf1c861f4aaf1318ba9de8d8da0265b183c03805b4ddcb
SHA512
b35477583f038386af6b1785dac9ac418ac92d7445b910709d94977f1733610c5cb1d1f79f2b1cc8d62a5f97c0972ce59709d43960140437457edf354a06877c
SSDEEP
1536:OBRVgrExucMP6LCTUaHbG45rA+MNiOqZ0Bstl:ERRsSqUaHRUiOqZbl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d109fa4434fcdf9f05eae914e1bd8dec_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ