Outt
Sett
Behavioral task
behavioral1
Sample
d5f8f8386d0af2c8aa0cd2a88e3ee33f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5f8f8386d0af2c8aa0cd2a88e3ee33f_JaffaCakes118
Size
73KB
MD5
d5f8f8386d0af2c8aa0cd2a88e3ee33f
SHA1
247fb6c23907af537014f5fd5a9113605971004b
SHA256
4094455b1f0dc99b6eb67d2e70a58ad8f0062106ede5b6106914f36d46fa424d
SHA512
cd723981856cdbe3de286c1f7894f7a2bbd38411a32cc1f538f3bf39e84dfa1e7953c3158cca86692cae65757b340e0988ff3f26e7f982a4b1aef5764cceb1ca
SSDEEP
1536:Bm1NGJVGnK9DYcYPJ7vufEK3Ot1/DBCVLUk:kX0VX90NPlu73Y1/DBi/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5f8f8386d0af2c8aa0cd2a88e3ee33f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ