Outt
Sett
Behavioral task
behavioral1
Sample
fb442f688b817ce6cabea4d020d38904_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fb442f688b817ce6cabea4d020d38904_JaffaCakes118
Size
62KB
MD5
fb442f688b817ce6cabea4d020d38904
SHA1
beafb2570aa902c15bf61f377147e6f3a4646aab
SHA256
89fe8bb1e1cbc0d7195792bffa8c1e6d06347a9d6f0cfda993c3fa712961019d
SHA512
120518eff051f02c66b2574f38ffaef5631271b4debdf18cd2bbf184c530606e3cc10d1c0ec44c7d68e85924b32e1744827fcf0b12e19b39165af08895620ca2
SSDEEP
1536:yl3E0Tl4sdWG90vFE9kKx6jixdGxj9Y37L8vzX:E39hRdV59fIjMGZ9UW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb442f688b817ce6cabea4d020d38904_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ