F1
F2
F3
Behavioral task
behavioral1
Sample
d3c511c2d5cb437edfd28a9461619bfc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d3c511c2d5cb437edfd28a9461619bfc_JaffaCakes118
Size
21KB
MD5
d3c511c2d5cb437edfd28a9461619bfc
SHA1
15e777d29c1ff714f82c59e1ec009cb6ca908af2
SHA256
be91ea0360f12ff80d24ddb1b8127009449014faff6d1b197c65ba83fc7d1df4
SHA512
64c8a5db7fcc026bec15416e6743bf8742743d9d59ecf3c03281cebaca7160d4f203c8386229325bfe66bed093851faec10d17864faf25f80300b5dceed64b02
SSDEEP
384:tS48+c4OIFTKnUItOL9JKhNjldsJKBes4r5s9+24VmVZZ5odT07t:tZ8sOIhU6WdqKBefs9+eZZkT0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d3c511c2d5cb437edfd28a9461619bfc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F1
F2
F3
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ