Outt
Sett
Behavioral task
behavioral1
Sample
d5e605363fae100a6698d0c6c38032dc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5e605363fae100a6698d0c6c38032dc_JaffaCakes118
Size
65KB
MD5
d5e605363fae100a6698d0c6c38032dc
SHA1
3d7460ec1e59612f44cd158c2ea00aa97eda2bf3
SHA256
46f333e731e2d9091cd35f835c3885c037110637a76e4a30fd1af295e49e63a7
SHA512
bf509b39983d4ebb3e00198293681dfa8aba52d39a4bdb46827433286d44d6802cd4f7dd01dd3df94a4edd397bfb7d0ddc574306c0f0bcf6f3ce833fc53c30bc
SSDEEP
768:h8WTpVT0X8zbUbzcU9GUgqMIUuQON6vZogcrom+amcA7j3NhF7kgZuRJ0e+N6PWF:RVw8rLfcuZot6aijuEuRhMfE8lL9CprY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5e605363fae100a6698d0c6c38032dc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ