Outt
Sett
Behavioral task
behavioral1
Sample
d2c00e033943d451be4572a1bea058c0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d2c00e033943d451be4572a1bea058c0_JaffaCakes118
Size
54KB
MD5
d2c00e033943d451be4572a1bea058c0
SHA1
152f064eb32394710983a4c26e3ba90685b2462a
SHA256
0471827d408be83d64a4a0b6afbbddf21df1c9d7ee2cb6cbe6da2368ee6eadc5
SHA512
b493b6ad8dff6d840ddb26e22aadb0fab87a29d723c080f23e796058f21adf46d8e423f437ef43d5377c82f4edba0053f20253cec00662bbad53ea90196ab56a
SSDEEP
768:szM2xVV3z5577Vw1udkFQ/JET32UXxxGPmWRNXHS1YVEoMbcwQXLiF6fQIB/o:V2b/dhwVVmmm3kYVQQXOcBw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d2c00e033943d451be4572a1bea058c0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ