Outt
Sett
Behavioral task
behavioral1
Sample
d15b74ce9f5ed9783633e4f166dd3993_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d15b74ce9f5ed9783633e4f166dd3993_JaffaCakes118
Size
60KB
MD5
d15b74ce9f5ed9783633e4f166dd3993
SHA1
4d689214fe34f414007ad08d7c187efec98bd013
SHA256
0d138b637d3db68b0951d2eb661b5aa54141a48bc956fdd65262ff06d20b8a31
SHA512
0a97131384e163bd648d260c4741e08bdb6e66aaf0290bf5084a9ae9db9bc7e36a6e66e8bacd1fedc2070658c66e17f61486953cfed3004c73c37b39b8653094
SSDEEP
1536:yHZoBl0i+yt+/wOF1TFNvn2JpLM8MZDTiiZ:yH2BGyt+/wOX2LW5TZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d15b74ce9f5ed9783633e4f166dd3993_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ