Outt
Sett
Behavioral task
behavioral1
Sample
dcca6f3de793add903e77088ee1bbe97_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dcca6f3de793add903e77088ee1bbe97_JaffaCakes118
Size
47KB
MD5
dcca6f3de793add903e77088ee1bbe97
SHA1
4489b1606a4458e15f3e68cc33c92c513ccfe943
SHA256
1e09e92bfe0f501509a1c5422eb764f1ffda8a4dca28c2ab11f75919327147ab
SHA512
cbe5af934a21392dedb784d0828fc8fa50a458d7dedf036d8f8cf193bedfe8cea648f7940b2d33bd33b9a42c149b3251d61e6466d96e43325a16ec8db97e1c5f
SSDEEP
768:yuUr3ip/IHI7NQTvVFIfr1VuLS/LHK4vjXmX3Lsm90wadxczWAXkP2ADhcX:yl3E0TrI5VuLS/+8I3LT90NHczWuCU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dcca6f3de793add903e77088ee1bbe97_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ