Outt
Sett
Behavioral task
behavioral1
Sample
eb1f0580819892712fa19e5a799e151f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb1f0580819892712fa19e5a799e151f_JaffaCakes118
Size
53KB
MD5
eb1f0580819892712fa19e5a799e151f
SHA1
6a0b254a9c0daf1a7a75f0e5eceacd7ab5d8ecd0
SHA256
15bbf8c0a5b2ad0c684f73553fe8a71767326d87f4b643526810560a58280e30
SHA512
f561fb2e63dd5b0597fa099f835582a2f25bc196d533788d2ae12658c3808dc76a4dd35ff3b07f20a67d4fabc5495550beaa24da98fa6e6e232048a91368269d
SSDEEP
1536:V8O9Nn6Rjri1BRSMO2cwTX7Nvkk8fUBEZ+7MEcV3:2Oz6VW1B7OFmXv8YEYE3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb1f0580819892712fa19e5a799e151f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ