Outt
Sett
Behavioral task
behavioral1
Sample
fc537e22074aebfc248bfecbdf92dc08_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fc537e22074aebfc248bfecbdf92dc08_JaffaCakes118
Size
59KB
MD5
fc537e22074aebfc248bfecbdf92dc08
SHA1
2e31f50740f249db8a7fa488153d5563acbee098
SHA256
eed5664a17614c21724fa297d2dbb7800a9df06af9eb85f60570a523e8817cfd
SHA512
829fec3315e0c8dd4ba54f948d49853839962ba884dd5f9930fbf07e4dfb427efc934b0398e8013e70b5ffbcc794c0d6d6e8b233d07388f42a76bf6055a9bcec
SSDEEP
1536:Bm1NGJVGyrfLIAQFLvFrV2D8FMUmaYOF7bXfL:kX0VjfLGvviZXUnL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fc537e22074aebfc248bfecbdf92dc08_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ