Outt
Sett
Behavioral task
behavioral1
Sample
efbffc571bd9c49554b5be0523277d7f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
efbffc571bd9c49554b5be0523277d7f_JaffaCakes118
Size
54KB
MD5
efbffc571bd9c49554b5be0523277d7f
SHA1
5d2390ea3ad113420823bbc2c9f6f29b6dc96b04
SHA256
29f9e9fc3803d16a59d329ba4e9671cf955dcb4a0aa92d7b157ea13d922f7310
SHA512
07089817535d70b61ab63064e9c4334cbeb051d4598a58c622ff73f7ae193238ca8aafe5ac805ef9316c95ea960b9b4c056e91936f72687695f0674383555602
SSDEEP
768:nbY4lgn9RrBHZY0UpezanMDujOp/BqqKKuqcUPvV7Mk7flqw3Hm/lm:EGMx/Y3DMDujOVBvTcUHxMSfMw3Hslm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
efbffc571bd9c49554b5be0523277d7f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ