Outt
Sett
Behavioral task
behavioral1
Sample
f658980ab060f709fcce37cda66533ab_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f658980ab060f709fcce37cda66533ab_JaffaCakes118
Size
73KB
MD5
f658980ab060f709fcce37cda66533ab
SHA1
be95e58c45319ed26ca2bf349bf8d2994f7a6a75
SHA256
a9f6b4ef85d1d47c455d5a222fb38a44a9b8f144cf02d7aabfeff27b6cc9bd21
SHA512
e384de1758a1042db6605337f96f8ffc583dedcf9f065a406ab94455e8d11bdbd36b8f3fc865513fa5434778d29bea56cd7790243f20f15e79c3181ee785269a
SSDEEP
1536:EGWodM1XMQOgk+NtUvI71SY00N+YQJZGubzEx8tm/IOHAe0:EGvd0M83t/1SYwvZvnExsm/E
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f658980ab060f709fcce37cda66533ab_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ