Outt
Sett
Behavioral task
behavioral1
Sample
fe0c5e41dedac332ad0072dce3bd323c_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fe0c5e41dedac332ad0072dce3bd323c_JaffaCakes118
Size
65KB
MD5
fe0c5e41dedac332ad0072dce3bd323c
SHA1
5433dce0485fda9881593e47729e3f4cd6bb7e24
SHA256
6ffe98d0f36eb732788bbf5f9a63a0a34962af8e93559760d83624bcda9e654e
SHA512
695b9866e0f65a9a21ac86cb1fb53c2ef3db7c71b288e4ad6e8251c58d85a452362a4e2fd9a442f0494ad380967db0032f57b44503163da1162a72cb836b3573
SSDEEP
1536:EGXGRoGbAGkD+Z8+HneOW+OIyYeRRP2johKhOjOMwPV:EGnRGk+8seb+PPeRRP2j1ojlwd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe0c5e41dedac332ad0072dce3bd323c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ