Outt
Sett
Behavioral task
behavioral1
Sample
d693cf5398abb5ae01dc0f6a46efa651_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d693cf5398abb5ae01dc0f6a46efa651_JaffaCakes118
Size
56KB
MD5
d693cf5398abb5ae01dc0f6a46efa651
SHA1
3cfe7bc1ce110e05a1d5f1f6a1ba87f5c4ca5f11
SHA256
2825065910b4dd0eadc332bf0f22e87b97d0249ea3abdc677a5663d2075aad84
SHA512
90d96cfd85e9cf999e9f9352c0e043a7c2f033f837e4bab7038877345832cd490ad5fc7b37615ce364e656f540b492bea1ca318e1654575076b6150427616f29
SSDEEP
1536:yl3E0Tp9IzIST5xT6N9GgHkcuFdioy3X8PXr6PIAH6:E39lO0SVx+N9GgHkcuFdCng76P4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d693cf5398abb5ae01dc0f6a46efa651_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ