Outt
Sett
Behavioral task
behavioral1
Sample
eb4f9fe02240bd26cffad5232ef40cc3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb4f9fe02240bd26cffad5232ef40cc3_JaffaCakes118
Size
48KB
MD5
eb4f9fe02240bd26cffad5232ef40cc3
SHA1
624660bb7b6c25f9af19a35ce33bff181fc5e9c2
SHA256
43416d8e57173573ce851051603d61b895b61f150368e5b473dc52f772f9d4df
SHA512
c44f25293f7e04a30a9c988777d5d8cc80620275686ee5df9ed8cf2375507b036de9ba0a9d37d9cc5fff78fc7375e9edd0c1577f7983a04e5bc340f04cd33491
SSDEEP
768:m+YlPqpYYSzLN6683eI7aMa2nBdhokEREhxPIh+3q7P18sPpIvT9o:ty0683pznBdhSiLOtPp0m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb4f9fe02240bd26cffad5232ef40cc3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ