Outt
Sett
Behavioral task
behavioral1
Sample
d248ebfb060d0f2a418631014a0f3a7d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d248ebfb060d0f2a418631014a0f3a7d_JaffaCakes118
Size
63KB
MD5
d248ebfb060d0f2a418631014a0f3a7d
SHA1
76a58b7f1aa9c2c313c8a56fdbac63f900c1eb20
SHA256
62dc6ea9e89a97e08051f4ebae801189f42daffe53e6d41c38ea34c17d288f2d
SHA512
d54b32b319a28d0f1e53e63d841fcdceee0fb6e8ffa65899e0e125a68fe653772a3a60fc896161858e38ef3d278a4e72e7682e7387acb0f8a5d5423c8a051cad
SSDEEP
768:GbvLDaaMact8TKjutarRFhEJo7CyoQab2EPZmzm29hCFJa+VUinOu1C+Hp1dPeNH:evBsrD1hoQaKEhW74bo+J1draLHUK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d248ebfb060d0f2a418631014a0f3a7d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ