Outt
Sett
Behavioral task
behavioral1
Sample
da6d3a0a7c229eb44d676d479d0aa1c3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da6d3a0a7c229eb44d676d479d0aa1c3_JaffaCakes118
Size
66KB
MD5
da6d3a0a7c229eb44d676d479d0aa1c3
SHA1
dfbfdc73d02fc8b5222b875dc878ba097f8a1dca
SHA256
a0f303e528e5ca025e07747048613c123e49a30f94997a98215966c52882f057
SHA512
fa8baa1c478fd58bf092c4cbbd7f86d9cce2ae94f60c97d5cd5dd48184828d780b1849d719f4bdc0e7928d849742929387e09a76b7782d7e5545f60ffa5b5448
SSDEEP
1536:yl3E0TFfTui8ZOfQCnJ59Whj332haPA2CCl+gkt53R3PmZm:E39NTuXq9WNGhaP/3QTXB3PMm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da6d3a0a7c229eb44d676d479d0aa1c3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ