Outt
Sett
Behavioral task
behavioral1
Sample
dfacde67c7b99796dec075aa25095455_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dfacde67c7b99796dec075aa25095455_JaffaCakes118
Size
64KB
MD5
dfacde67c7b99796dec075aa25095455
SHA1
5cd9a19fab260945c156e800ebf096d86762bd00
SHA256
368710680fcb66726e77de1e18eed4fa6a3d1259e94c1e9ace35c4e990f4867f
SHA512
db9c96e965924578d3814ab38a928f04692c33c3b2b6668cdfdd74e563d592d04648c811cb15494f112c5623fbd263ff9b80618564b5e2164472d7945fbf7e3e
SSDEEP
1536:1zExMwCGQ2jehwRemyccVZhGH07/1KupKBqzcyxTpDfHxsqoabDD:1I+wCGv4w4YcVZhGSTpe8cyxTpfHZoI/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dfacde67c7b99796dec075aa25095455_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ