Outt
Sett
Behavioral task
behavioral1
Sample
f5a458aa98cc2fb833a596a8c361c348_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f5a458aa98cc2fb833a596a8c361c348_JaffaCakes118
Size
49KB
MD5
f5a458aa98cc2fb833a596a8c361c348
SHA1
dd285b81db0f31546987d85da89b458900911791
SHA256
17df891f49195a80e01ed3818303cc0f145459e497b22b3facdd1904137992b8
SHA512
d4e4648ecea3f3eb9d38192b3a35292bf94115bdeddca43727aaddd780ab1a6c670860821ea45d5b266f77fd4da660008d4e9f5b7047d8c58e85ab60aa176bd9
SSDEEP
768:yuUr3ip/IHI7NQTvZMG/wmNmstTSlqGzCeX/JriYCdF16tnT17COvh/f2eA:yl3E0TxLNmstqqsCY/9veCrJfg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f5a458aa98cc2fb833a596a8c361c348_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ