Outt
Sett
Behavioral task
behavioral1
Sample
d6de8a29f97007b520d705e1078b6889_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d6de8a29f97007b520d705e1078b6889_JaffaCakes118
Size
61KB
MD5
d6de8a29f97007b520d705e1078b6889
SHA1
7fdb500892598249dac6ebe1ab0a90a1be21064f
SHA256
19703049cd29209a5fa28960014065c478caa98a97f595d3878ba62aacd15115
SHA512
11739e9efc6ba0b036a250f8c8218614af29979c34321a31ac87e0369956f00301b12ece70b7d93d5853849485170296bea27947611f993dd172ab23b309d08a
SSDEEP
768:nbY4lWFM++xOcMA2xDvTXI+mYRhwC4rD8wYVJhewto7Um6B4jq4AM1MivbPPq6LX:EGWm+rGoIsR2Ci8Tneomg4jqXMtvbn3B
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d6de8a29f97007b520d705e1078b6889_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ