Outt
Sett
Behavioral task
behavioral1
Sample
d118bc4149e868eba1cc3c371c83c8a2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d118bc4149e868eba1cc3c371c83c8a2_JaffaCakes118
Size
66KB
MD5
d118bc4149e868eba1cc3c371c83c8a2
SHA1
5c8fa33b14f6076dbbc3efcd1ece2cfe125f7a54
SHA256
571005e72222a7099e3a3b77a6228fe7744f841506088e70401e9b11fa198b40
SHA512
ffd2bdef0ebd364468c1c7aa1079620031865e4129a47c150cb3f2a47da657ea4f782c941c877e4b295e922da2f532cf14e501944e7fbe801263927c17a75187
SSDEEP
1536:5jRmOmS5NHlTkEA3ou9QFPQiJCkOHEKOHzMVayFr3MgGEVsYF:xfmS5taUPF4D9OHzMEeYZE2YF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d118bc4149e868eba1cc3c371c83c8a2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ