Outt
Sett
Behavioral task
behavioral1
Sample
ebf8c808a0f80c68239401233920f0df_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ebf8c808a0f80c68239401233920f0df_JaffaCakes118
Size
65KB
MD5
ebf8c808a0f80c68239401233920f0df
SHA1
cf6cbe3c88c5b5ecefa27ba58af0d3a108dd8acc
SHA256
36e5ef040ced24c7fbabd2f724bcce450ec635a86b8afd2697c0c400fcc95b6a
SHA512
1ed5cc7b98b56083c243dcf74ae9e36560f23f1ca98013ef44a5b569c7dad7b1be9f99a815db72597fae90d17eb75d7113e10e9ff6c3eb4fc57c85a240190eb7
SSDEEP
1536:yl3E0TrLPq5GP5+G8hWE97umwGHdwv13yD1ioqgnhKiYi:E39Dx+t8+7bwlqzqgpYi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ebf8c808a0f80c68239401233920f0df_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ