Outt
Sett
Behavioral task
behavioral1
Sample
f092812973de392ade0d425e982ee6e5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
f092812973de392ade0d425e982ee6e5_JaffaCakes118
Size
65KB
MD5
f092812973de392ade0d425e982ee6e5
SHA1
48ee3b4a0c5d497cf394fd9089ef4f62cd8e8e8f
SHA256
25d32101de1fd38a6508e28bac27601ba8a6b7c2c785bde5145efeb1334739c8
SHA512
be352f6b4ea2f0220f195ddd7ef2a6c6b1fac8b07d5a9b8ac8356527aa733eab3bfd51c2d5879ff67cdeefa32d14fd5569d9df664e7e75804b39cbf216bbb488
SSDEEP
1536:MhBRVgrExucMpgxRYmWqrnkG366CfKVoyINWj1WS47NodKyZbIVER:cRRswKmlxCzy4WxWSOG7CE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f092812973de392ade0d425e982ee6e5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ