Outt
Sett
Behavioral task
behavioral1
Sample
f04e5cb4270e0a2199ee111fd730537a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f04e5cb4270e0a2199ee111fd730537a_JaffaCakes118
Size
65KB
MD5
f04e5cb4270e0a2199ee111fd730537a
SHA1
b3496e53a753452d895755f8f89b6b2670408cd0
SHA256
3bd5119285c7209a0c3b6c2759ba3e36d2e4bd8477a33bc460ba17e925601f01
SHA512
f00ae4655bc447eac47512f0eca4cac4a361523a8b8301b00d0107e4819bc0b4ff1170fb337124bda2a7f9d90a255dd37cac1ecc92b6716ec330e9da7d8e5303
SSDEEP
1536:V2bdgPRaIurj5icuUxsDBA1eAPkt8Mup6bBddHxKvWrI:Wmado4xKt8MupErR6WrI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f04e5cb4270e0a2199ee111fd730537a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ