Outt
Sett
Behavioral task
behavioral1
Sample
ff35a5393d3b9a942a7c84c1dd76bbd2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ff35a5393d3b9a942a7c84c1dd76bbd2_JaffaCakes118
Size
72KB
MD5
ff35a5393d3b9a942a7c84c1dd76bbd2
SHA1
92c12789f4633e61ff4b343ca066c5e3b76af625
SHA256
6f0e296528b29d6d95b1da60f63c453e446f3dbef1a0a22517382b36411f375b
SHA512
c6c095d2346af285828163d5ae2132922d826a98d461fb97d907bd5738043adbe63077747ac15188cf2deb7c714c3962a9daee042458046673e5ec32831830c4
SSDEEP
1536:RVsS6K8lTSxZfJIZBwbD+J3GSfIYFN25ahBW4Gmp:Tn6h4RNbyJWTYFU5ah19
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff35a5393d3b9a942a7c84c1dd76bbd2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ