Outt
Sett
Behavioral task
behavioral1
Sample
d5e51973be3e33174aefe1eb34274445_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5e51973be3e33174aefe1eb34274445_JaffaCakes118
Size
57KB
MD5
d5e51973be3e33174aefe1eb34274445
SHA1
47668ab20502918c593850d284cad3ac0050bb10
SHA256
1396bd36584b07ed3d187618aadaf33f77d3df24f5b1b4023f3f8608549f1f12
SHA512
63952bfd3cc4a31b3f29bfaff2893e56755300a75e10bfcba08dd629caa28a7e11b20b0f0b681397a4efebb100cf4d6bb89fe36cdaccce0213ef967b6c234e74
SSDEEP
768:d61guqcmwVeMXtL+UctJHAtjgpgPzGlUUmTtI1m9gEnvmOxF3t154vDFVbI:agF0eiyUcbHAtro+NvmOxF30I
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5e51973be3e33174aefe1eb34274445_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ