Outt
Sett
Behavioral task
behavioral1
Sample
d14fc0eeeee463438db27230f0c8e77e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d14fc0eeeee463438db27230f0c8e77e_JaffaCakes118
Size
59KB
MD5
d14fc0eeeee463438db27230f0c8e77e
SHA1
d913ab7283677cff3955eec719e3980bb03683b2
SHA256
35263f12d48b94d378e7d63c45a8a5bb6cc887f92b1cce4e5c6cfeb3b0283678
SHA512
8af0d6b09ab911395d582cee7abb11326407c3c69ce8974f63de1e764f64511a1df9c4091493e35589b9113aed1826d835470de5549b9f8043d362bf0836bb06
SSDEEP
1536:yl3E0TYsN4tc2uRk8syJ8JrqUymj/jUa2m:E39fmmJ8JrBymjbUa2m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d14fc0eeeee463438db27230f0c8e77e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ