Outt
Sett
Behavioral task
behavioral1
Sample
ddca5d99e9151adb9a31eae9c014f46b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ddca5d99e9151adb9a31eae9c014f46b_JaffaCakes118
Size
70KB
MD5
ddca5d99e9151adb9a31eae9c014f46b
SHA1
66f4ea88862a867df15bf3ae1e4f0904a4359183
SHA256
250bd237c59a9d430c8b9de69c460b33e06fb0c448790d2f71b23ca68c384609
SHA512
0d475a25d8c2b01da35756b20cfcc7ce3b6fe790731f5bc704bcad774e34497a81918ba7bb9c975e48affc3b9bf73d9b0e450966f4720dcd70abdcbbd217da7e
SSDEEP
1536:2LOJMXV6bL+zGXJDJcAR2YrzhYlpNfTcGnyHuCE13S:2rk+zGXVVrzhkv7cG2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ddca5d99e9151adb9a31eae9c014f46b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ