Outt
Sett
Behavioral task
behavioral1
Sample
d6d66eda41d6979a48679f3d16005369_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d6d66eda41d6979a48679f3d16005369_JaffaCakes118
Size
63KB
MD5
d6d66eda41d6979a48679f3d16005369
SHA1
8df19512957c23aae8ff75a69bf5626d1384800c
SHA256
1e3cbe6116f9753adad1db55c188ed6ff7cd03ae2906de027906cebd85b4b1e0
SHA512
b737db3405b3e2f3e382a4f06c2e39976b9958669854439a58adb82cf1f5cc22db60e733529201667d811cc97b111f997b9d897e4ffd2c2a2c2dd6040132b7c1
SSDEEP
768:1zExMf4sJGHw2jn52z8VxxJBvV6XXzWVqL4OW0MxX+mso1ssuqiWdiC91qH/cq8z:1zExMwCGQ2jIIl96n+P0irsrstXXW3bC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d6d66eda41d6979a48679f3d16005369_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ