Outt
Sett
Behavioral task
behavioral1
Sample
d57266d5dc673d80139c45ccd597ad29_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d57266d5dc673d80139c45ccd597ad29_JaffaCakes118
Size
55KB
MD5
d57266d5dc673d80139c45ccd597ad29
SHA1
6a522ea37146e0874722e4ff3618342872cd95d4
SHA256
38dbf4512ad3b1e9b330ca731bdd35185834f9e1b918560b8cf9f1e625d13c35
SHA512
12a99cb7354af9738203ee0c4c3f3efd5754ab9d24f1f4f68604600845d14324a065f8dde8507abca15e0bb3ffa46d75583fce9afc7cbaebeffa0acb3e0664ae
SSDEEP
1536:ob8Vwn/Opyqds4zXYvefDUPNjUcN44L2JPx:oz/v7MUmcKRJPx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d57266d5dc673d80139c45ccd597ad29_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ