Outt
Sett
Behavioral task
behavioral1
Sample
f52fb35d592c4c3636832c2e1edabc3e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
f52fb35d592c4c3636832c2e1edabc3e_JaffaCakes118
Size
57KB
MD5
f52fb35d592c4c3636832c2e1edabc3e
SHA1
ffa093e1c2a4b11b5ebcaf9ae2a0cccc63588c1f
SHA256
3e2f8d391b945c0c02f22226a00199edce5522fe93723fc2b9228f1063ec42a4
SHA512
d1285c94a5be96534275149806bbd9d3b9c0fd56285869bbeb62fd5d8ae681fd1dc9a67eaebef3737553dc6b04319574056c8bf99a855d4784dd36067a440ecd
SSDEEP
1536:GQ3tfgXKfl7o0AcbXnlgUpnWQjQGRa9lfOFAaBot4:VfgXKfd11nRjgva+O
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f52fb35d592c4c3636832c2e1edabc3e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ