Outt
Sett
Behavioral task
behavioral1
Sample
eecb1fd9ad50ba96becdab4c4722d5ba_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eecb1fd9ad50ba96becdab4c4722d5ba_JaffaCakes118
Size
59KB
MD5
eecb1fd9ad50ba96becdab4c4722d5ba
SHA1
58610ced22ce5989d2255a3c66bf8929b18a9d64
SHA256
174508ca2f752d7430a8df6428ebb98241a31bd91561259454d5b4abe4f709fd
SHA512
20f2a0b32bed934092c7101c8b636da2208b2292fb6aeb856cb8f09769e1990ab4746daa5b38063dbd6fa6d558c5eec68994bc9bea1f9717ff5a21ae18e622c3
SSDEEP
1536:ob8Vwn/G/Q0XKIBOks8a9wkeYRhfjRUzYjaEt:oz/ElKLX9XeYRhfjRjt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eecb1fd9ad50ba96becdab4c4722d5ba_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ