Outt
Sett
Behavioral task
behavioral1
Sample
d675c4e8fc1c01fd942a1407527bf193_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d675c4e8fc1c01fd942a1407527bf193_JaffaCakes118
Size
74KB
MD5
d675c4e8fc1c01fd942a1407527bf193
SHA1
620436904a7a12a6fc5bfcf6d4a8f32f2f431541
SHA256
4f6461235bac7168bfb229c918f027bb266ed8e771fa7a0884d6daef97ffe88b
SHA512
c8c87478c0b0041b12a36bd6751e124adc18b4b912a6f5322048e17dbd2bb65a7f070a621e75851bcc2a9f4666e4ce742abfad795d63d67bdbe48f61fce4f9d2
SSDEEP
1536:EGu6ynxm0y6q1aSFrrRAvxuwi+fsDSj2dtzcg2DupIn:EGGxUprV4xuiAsTn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d675c4e8fc1c01fd942a1407527bf193_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ