Outt
Sett
Behavioral task
behavioral1
Sample
dae044afef8c52347e5303d8584b6dcd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dae044afef8c52347e5303d8584b6dcd_JaffaCakes118
Size
66KB
MD5
dae044afef8c52347e5303d8584b6dcd
SHA1
4d1a6eab51b765f94b8ea3f55af0b2d4ae812bbd
SHA256
407fc4d21ed6915c79640cc69cbd34d463a8577cc7c1a3fdca36ac98821f25d7
SHA512
24f7e79b3175130da9b9b3fe8673fb1158dac49f1dcdcd1a0b6eacfa8f3eb12e852a138b84396104f3606ad6025ca2d44269a7c03e1aa69a2e1f7e01ce713154
SSDEEP
1536:yl3E0Ti/og1vTKLKAeU+UpCy+Gb8ARvx2MZIMnavY6:E39Yog1bKLKjU+UpdLQARZ2MZI6aA6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dae044afef8c52347e5303d8584b6dcd_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ