Outt
Sett
Behavioral task
behavioral1
Sample
df9d932e53469263af09693aace2b936_JaffaCakes118.dll
Resource
win7-20240903-en
Target
df9d932e53469263af09693aace2b936_JaffaCakes118
Size
61KB
MD5
df9d932e53469263af09693aace2b936
SHA1
9b7d746cf5aed29e1d57fb9edaf95e84aa1c6825
SHA256
8ca2e5926c75f84f9271305998f169a703c11a291817b1906613693bc1bdb174
SHA512
8a4ccfb4c09644c4c75272eb66e872b9ca3efb139dc77c7f309f4e9f9139c014bd11a651798dd924c9c3bf40073988514080cc3bf9a0a9fee964da47c603e252
SSDEEP
1536:PPyxsVWo9YIDOyiiDW215Tdd3GR633aqfF:PPyxaYIDsiDN1RO+3aW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df9d932e53469263af09693aace2b936_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ