Outt
Sett
Behavioral task
behavioral1
Sample
d326b54bcb6038236dcb4555ecb4b586_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d326b54bcb6038236dcb4555ecb4b586_JaffaCakes118
Size
69KB
MD5
d326b54bcb6038236dcb4555ecb4b586
SHA1
b2bd3343af930ac7a69bc920628b59c3dc1878cd
SHA256
2d157dfffb7e2f3a9a57bad4681700fd6020ef8118cfff1feb23fc53405aa7f8
SHA512
aa83a1f288271b8544e32511545fb7e6fd0ffbcccb6b5aea973380e095d8b34951543e875601aa32ddde0eba9aec86804863e45b207d6eb6ab89220fcf7cfe00
SSDEEP
1536:n7ZLNPp9pZBM04GcYW9bPod6q9XcZO+465qoqnuvA3ZZ8821XI:7ZppL4G3obG6q9XcZP4H/2ZI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d326b54bcb6038236dcb4555ecb4b586_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ