Outt
Sett
Behavioral task
behavioral1
Sample
f586c3d94c1cac642c94b619f95d2142_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f586c3d94c1cac642c94b619f95d2142_JaffaCakes118
Size
62KB
MD5
f586c3d94c1cac642c94b619f95d2142
SHA1
8d6bd161060dbc1e7af7c63d20657128fd9174c8
SHA256
3d8c868cbce008cf6be659cbfbf9ec5e8549568d47362e19566c3a64f77ac4fb
SHA512
ffd11abec3a9f673902aceab6e3426d23c3d9956f2b874233b79bc23e0395c1afe09326c71c8ca47f673cebdbe10f71ddc60cf460514d26dcaa05302a65e3bd3
SSDEEP
1536:mPO6KEVbsVP0g4ypDrYM6kyDE7+2dO0zUP0xWEKxfKRFWyy60EM:cMEVbsVcF8l6lEjZUsLKXyy60EM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f586c3d94c1cac642c94b619f95d2142_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ