Outt
Sett
Behavioral task
behavioral1
Sample
df084732e82fc7cea00904f7bc5bd0bb_JaffaCakes118.dll
Resource
win7-20240903-en
Target
df084732e82fc7cea00904f7bc5bd0bb_JaffaCakes118
Size
64KB
MD5
df084732e82fc7cea00904f7bc5bd0bb
SHA1
cb584966680d346682cf41555e13eefcdaaeadaf
SHA256
52af9a69de78d4713b5bd59e12078a90008d8021bfa5f97e2dccc1b3495a3bae
SHA512
62e3ba45502e46a9283e5eb1d5e6c252f1e352a3e3f7ec698b9405b896dba8fd8050cbfb7d932255a24abe9c620abacecc7c98d7db1c1f993f56f5f16da966f5
SSDEEP
1536:Bm1NGJVGWf7fM/MaWyyac+dM9IpYdqGb5:kX0V3jM/3VyAZpWqG9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df084732e82fc7cea00904f7bc5bd0bb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ