Outt
Sett
Behavioral task
behavioral1
Sample
df02ebd433fd98b08b7e097cb66f72ea_JaffaCakes118.dll
Resource
win7-20240708-en
Target
df02ebd433fd98b08b7e097cb66f72ea_JaffaCakes118
Size
53KB
MD5
df02ebd433fd98b08b7e097cb66f72ea
SHA1
e208272c2859b62a48792a2548050dcfc14f05a9
SHA256
40df9b23dff6565dff20dfd39abaeb75749d5e5f72c51775d6e8b4604bfa6943
SHA512
daaa69dad501507da45cb4e144e7116ba8895d07f455217e265d47a4a4bee1193402e588e8bea5c7e7e04abeddbe76754990ef39ef77da2483f72411a5c9c1e4
SSDEEP
1536:GQ3tfgXK7yrIozLpX3C3dl1kylCL7kWvNkLbuR:VfgXKuIOpX3Cf1kylokW1k2R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df02ebd433fd98b08b7e097cb66f72ea_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ