Outt
Sett
Behavioral task
behavioral1
Sample
d28bfd7d845d64dbff068a6f99e9e841_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d28bfd7d845d64dbff068a6f99e9e841_JaffaCakes118
Size
66KB
MD5
d28bfd7d845d64dbff068a6f99e9e841
SHA1
823c4739f8f5e2ee70295c4010e3c5c9b934885c
SHA256
3777da3d71e2550482f2e31bbe6e44fa34ac82c79aca3fc7fe978b287be340a5
SHA512
040894d14d3d71131fef51285c4ee7176db002d05a7314b193a100abaa6c80ec1163e84fc815c73670b1dc71286219a2bd2261454b25b3d5f15af92462de033e
SSDEEP
1536:yHZTo0F0JGMe3kQicyJeW8phXgKnbI+QOw62vJ:yHQJGMe3kGyE5pN5nU+Qp62vJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d28bfd7d845d64dbff068a6f99e9e841_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ