Outt
Sett
Behavioral task
behavioral1
Sample
fe68c4f7e4d17c929fa143aea45f9ad2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
fe68c4f7e4d17c929fa143aea45f9ad2_JaffaCakes118
Size
66KB
MD5
fe68c4f7e4d17c929fa143aea45f9ad2
SHA1
08078c33f3339f29d1cc07485e59137df5a9be8a
SHA256
6e8527b00d648e5de37b823cd0475dbeded90689a2b6055043b5480a537bbdb0
SHA512
f32e2d3d62d0bf3d70cf569d366b943177c09576709afdf064991472193cc9936b59cc7c2a477ff8a5f574386248a32e407bfbec89418938b456fe7a1eb2a72c
SSDEEP
768:nbY4lyDdf/SFl5Hb0KYmyDrPHRSKXKETdcsFoot6ZY4w6Zrwm/GT32N2KzxL6IGB:EGySX5Q2OTxt9dcsp6ZETO5L3khyda
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe68c4f7e4d17c929fa143aea45f9ad2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ