Outt
Sett
Behavioral task
behavioral1
Sample
feb058268a4739752612add807dc48ef_JaffaCakes118.dll
Resource
win7-20240903-en
Target
feb058268a4739752612add807dc48ef_JaffaCakes118
Size
51KB
MD5
feb058268a4739752612add807dc48ef
SHA1
4cbd8ec8b7e9c97f645042d711308c0ccb6acd94
SHA256
1f43ca068652900bc0e798ab8f88486c2d25c4bde1e2deecf1e77241b2fa29da
SHA512
159c59e88b180e4ef74440928d3bd9904c2a395b19c8e1536e84032046eac2d3241466f25fbb07091708bb6874ecd211e3c4ec2f9acd78b2cd6d6ca987ce5b52
SSDEEP
1536:V8O9Nn6Rjri1qaUZb/9ifJDIktTD/fY/Mh3:2Oz6VWrUZb/EfWkRqU3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
feb058268a4739752612add807dc48ef_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ