Outt
Sett
Behavioral task
behavioral1
Sample
d3cb5ae77ce317e75bd667295bcab305_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d3cb5ae77ce317e75bd667295bcab305_JaffaCakes118
Size
79KB
MD5
d3cb5ae77ce317e75bd667295bcab305
SHA1
47bf321d7907967b0cb1c429a84fb059e2e7388c
SHA256
60e609dec3c8879d075d1016b09140334f23aa948666942d1ddc62bd80b96d31
SHA512
974de37593b121d1cfbed15a9fe2928011ba50ef9ea98b60eb871e62d16e74953729fde6bf23e278b7ef94b708fbaf9333d1aeef9cb99d6a3fcae1f0df7c21b8
SSDEEP
1536:GQ3tfgXKeqr1lRgEqOjCvG54GPXUDzDFmlzYSSpcxx7SKuD42lUIG:VfgXKeqr13wfvL6SzGgpw44WS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d3cb5ae77ce317e75bd667295bcab305_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ