Outt
Sett
Behavioral task
behavioral1
Sample
dfc45e7139991c73c9be08c6e49b391d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
dfc45e7139991c73c9be08c6e49b391d_JaffaCakes118
Size
63KB
MD5
dfc45e7139991c73c9be08c6e49b391d
SHA1
cad832366b932a3bb14a591fbb72ad434f44ad14
SHA256
350bf7ab413a103d7dc1d6346c8b006b7a4851afb303d02c1d9d2eccd747cb2b
SHA512
fe3156d085e6690eaf6f5f47e7b761be8cc0a46e126da5cf3e049b3b533431e86aeb64c6010912726ebc65eb7ab2dfa2ecfd0b5043afd69cc644d0e9aad06564
SSDEEP
1536:RV204y6waiXKsrzbby762mafLF4FhLSf8z6:T204yhaGUVrLFuVSd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dfc45e7139991c73c9be08c6e49b391d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ