Outt
Sett
Behavioral task
behavioral1
Sample
d29126a146e1e5f5b190265c737d5f10_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d29126a146e1e5f5b190265c737d5f10_JaffaCakes118
Size
61KB
MD5
d29126a146e1e5f5b190265c737d5f10
SHA1
38374844f4e878d7cc8306fa2af931f7b054bced
SHA256
5ff1dff1d7c38f857cc1e1fe41b47890873bf769780be4e43f82169026ad9c40
SHA512
d435f9e578ca521deb61365f008c97a2d927640d20378de2d2e50cc3ebc26d6772b620b558f9e6fa5904a57b87f10943f316ffeb64622f06c10684efec3a1df3
SSDEEP
1536:yl3E0TbBVtqprbsdXmZ3f8foGzQ7h640ixLX4b5tQGy3jtD:E39Rnqq0Z3f8DOYxmos/3j5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d29126a146e1e5f5b190265c737d5f10_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ