Outt
Sett
Behavioral task
behavioral1
Sample
fcfb13a58e8a70305e0f05f232fe25a2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fcfb13a58e8a70305e0f05f232fe25a2_JaffaCakes118
Size
69KB
MD5
fcfb13a58e8a70305e0f05f232fe25a2
SHA1
176cadb08415040760514337ed34a6a6b8c783f7
SHA256
2b1462c8144a27fd346f91b536b3abd11710ae88b6e41bc4781faf07b5573e38
SHA512
52be592535426f42113d922199efee84d160a489d8bd85768bf00e4d82ba194c24ab751b7df9ac479cf659e375675678962d66a57049b7ac80de4c171f952e03
SSDEEP
1536:GQ3tfgXKk/SugLV+6y1iNdOVXkiMD4Uvg8tnLGoybAOXW7RhKVX:VfgXKk6ueLEkDMct3y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fcfb13a58e8a70305e0f05f232fe25a2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ