Outt
Sett
Behavioral task
behavioral1
Sample
e1e5089f32d82a5af8bc21a929b73962_JaffaCakes118.dll
Resource
win7-20240704-en
Target
e1e5089f32d82a5af8bc21a929b73962_JaffaCakes118
Size
64KB
MD5
e1e5089f32d82a5af8bc21a929b73962
SHA1
63907121efadfa7445a3e811b2ae72bc0b2b8a44
SHA256
3be5c4c26539a2dc0e0f5e763b8d6b90c81b2adcdc97d3e08b975a1bf06bb277
SHA512
651ba8ad6b76e0cf73561c1e1698a5adce6df20a097d391a2fe914f871a645bffcbbe5836a3ff17a1471ee048f13cdcc85f4882bf03b47ace27381a7db55d0c5
SSDEEP
1536:evzh9Gj7XfoUWLRiEYsKfm+McMem2ML2chnQ:cfE7XfoUWliEbKfmp8m2ML2chnQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1e5089f32d82a5af8bc21a929b73962_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ