Outt
Sett
Behavioral task
behavioral1
Sample
df54960bd0f6bf281cdf7144b3535ce1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
df54960bd0f6bf281cdf7144b3535ce1_JaffaCakes118
Size
57KB
MD5
df54960bd0f6bf281cdf7144b3535ce1
SHA1
2cfa477ea0eda8d7fbc3a53ee841d21982afaf0e
SHA256
47293d7a22491e9552a678f8d6ef5e521024f71c1c37d2fbe387c0e5867bd8ff
SHA512
d4fb6441241cd5e04420cad5c01e81e8776c6d95495c5e59014d52932646534febcf4deabe1f83e480e5dad3e9cf9c7c7c551567f6447da8f7805f3f804af57c
SSDEEP
1536:GQ3tfgXKw8Ehd1gThrNSkYXuSON4/ZsfMGHxetckq7grQT8RG5o8m70:VfgXKxED2ThroXuSO4oTHY+t5wRG5yg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df54960bd0f6bf281cdf7144b3535ce1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ