Outt
Sett
Behavioral task
behavioral1
Sample
fb92aba7e571b3029a368353f291daa2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fb92aba7e571b3029a368353f291daa2_JaffaCakes118
Size
62KB
MD5
fb92aba7e571b3029a368353f291daa2
SHA1
6eedf784c550a0d1520b4f85a986c71960784879
SHA256
b3650f7c1e2253b56aae2d4984a23db29d057adc0041f4042b0a97b92cf239d4
SHA512
d246b3987454fd0b7d8d957d83cc6bf9ecc64a7a28da48f0bf4ad3c28ffefd3fe39e3e039f1fc14ca3d20b4658ac1035f13cc3a5c1dcff87045efc61a93b9483
SSDEEP
1536:ev5ChpsbAhhlcF7+lL4+lD+f7yAmDJpX1b:Lhecjl4+lL4+lD+jyAmDJplb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb92aba7e571b3029a368353f291daa2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ