Outt
Sett
Behavioral task
behavioral1
Sample
e015afa584104c50ec8197832d72858c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e015afa584104c50ec8197832d72858c_JaffaCakes118
Size
60KB
MD5
e015afa584104c50ec8197832d72858c
SHA1
b3520a737d7dba3f73f6efcddccdfbbe6c2c5aef
SHA256
16042ae45bdecd2bfe52dbb016cfd8b2f0c404d5c3bd86402a8d1d14a473fc11
SHA512
afc5337ab470f484ee5c1db1bb30e80f91fc0c5948f098e7e33637966809efa961a3a1057ad4c52ac224af74951e4361cd8de5b0d02b565f021a86f39c4b5095
SSDEEP
768:yuUr3ip/IHI7NQTvMuAbXdAeAiGVB+hHi2e8nigcA1bD2VKXd0X1WhPCjJ22jyhh:yl3E0T0usNAkPnCKXddtCjEtNlaJfEEm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e015afa584104c50ec8197832d72858c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ