Outt
Sett
Behavioral task
behavioral1
Sample
fa13bf021f338af28d78ebbd1370fb28_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fa13bf021f338af28d78ebbd1370fb28_JaffaCakes118
Size
55KB
MD5
fa13bf021f338af28d78ebbd1370fb28
SHA1
dc6c8ead81a01b119a337d9c692f30fce9e000ad
SHA256
b1ffc70028d74dbc153ccc551159731f17ca3b4b3c9b02741cc07041d3d36254
SHA512
cbe59bedf626ede71f4c089620b0dce8b927e6502c45c29e5e4e52f8b1f24002214794692718a14281d65e81c16d345f6c4c2f730c03f6196021b71310e9a51d
SSDEEP
1536:EGGq4PsjXFS6HfsInYbknBkckwOpfjW6o3G8:EGTc6EdkBkxpfjb58
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa13bf021f338af28d78ebbd1370fb28_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ