Outt
Sett
Behavioral task
behavioral1
Sample
d34477cf7361458ad6113db23d61d2e6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d34477cf7361458ad6113db23d61d2e6_JaffaCakes118
Size
53KB
MD5
d34477cf7361458ad6113db23d61d2e6
SHA1
73c95b7ee836ee6ee72186026b8ea49f05a289b7
SHA256
5bc73898882507abe2cc49e5fafa7b89f2edd3e493e7640313b4de858839805f
SHA512
98285cca49cb7f36bc579668a65008ea373a152d14f5cf1740fc5dcb1b1e2d7992a2fad6876b7026ee0cc5a7d99dd7dc95598c3c99652484d9d5255878c86e78
SSDEEP
1536:V8O9Nn6RjrimADsvEJ50D1ZZwPJXCJMKAGRWx3:2Oz6VWmADsvEn0D1Ze/GRg3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d34477cf7361458ad6113db23d61d2e6_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ