Outt
Sett
Behavioral task
behavioral1
Sample
fecb1fa3d1dee422c3143e5df54d2393_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fecb1fa3d1dee422c3143e5df54d2393_JaffaCakes118
Size
62KB
MD5
fecb1fa3d1dee422c3143e5df54d2393
SHA1
b6fc4b8b53eef14456c82a621d8c8350de752301
SHA256
3bce23caa35a3f945e78cb66b49761cfd71f12ae4b7c4fe13d551f664d4789ce
SHA512
e03abd908771b353ce355ab8b9a971c6eec2226e8b2f9e157d953fc8608ac1c59746d1215a3074272bf06184dea1780e753d59a4ca252aaf0c1c338a9dbe76d9
SSDEEP
1536:97YouoTlRi8cXKxIJ3hlEJheBctDrFc6I03xHQaq:lnNC33GheBoS6I0tI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fecb1fa3d1dee422c3143e5df54d2393_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ