Outt
Sett
Behavioral task
behavioral1
Sample
d4fda959f94d7730de632d3c9398d4e7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d4fda959f94d7730de632d3c9398d4e7_JaffaCakes118
Size
65KB
MD5
d4fda959f94d7730de632d3c9398d4e7
SHA1
b612eec4391a95ff6a8d7a0c1bd6f787ba358de5
SHA256
2db4de5e13c25a09afb7002e7804eae77e3b0072ede2ea8ec5788c692ee00586
SHA512
4fc2ae6036ffe291b9a0aff066d71eab5c454552c58fc55ab12201a56209225b93c7a20e07a02046dcd14267070e5287ab6778db252a433a7761a77f495ed814
SSDEEP
1536:mPO6KEVbsVP0g74d4zwLabC6sIRHtRG1jfYaX31VblXODLNU+//U:cMEVbsVcclGIZtRG1bVSyg/U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d4fda959f94d7730de632d3c9398d4e7_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ