Outt
Sett
Behavioral task
behavioral1
Sample
dcb8335f6fc6019548c33fe8e04d10df_JaffaCakes118.dll
Resource
win7-20240704-en
Target
dcb8335f6fc6019548c33fe8e04d10df_JaffaCakes118
Size
61KB
MD5
dcb8335f6fc6019548c33fe8e04d10df
SHA1
ff72910a23a7a398f0fdfab6568182bc39b977bf
SHA256
4d928c13fead0ba549f810976f80a0300890f78ef43e533a7333f14551dda5f2
SHA512
eec7801b8437b56779389ca2990135b4ff840abe43a1246f4bf8667393c7e29e038b721608e0997d3bf95eafce7e9ed92ffd31b397fee31cfcfaf7c3228b50d8
SSDEEP
1536:evt2t6tsd7Xeh5PbX11L82RPFmIQJQj+eA:G2tqoXeh5Pnv1YQ6eA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dcb8335f6fc6019548c33fe8e04d10df_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ