Outt
Sett
Behavioral task
behavioral1
Sample
0009f19d73cd7cbe9990b8c65e46787f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0009f19d73cd7cbe9990b8c65e46787f_JaffaCakes118
Size
49KB
MD5
0009f19d73cd7cbe9990b8c65e46787f
SHA1
3a0da655e17ba68e2b26c4d8e4bdb37c2083a5b5
SHA256
67c71cd6426720d0cd4a17c765aca203fbee40878c2c491d7068af195f931290
SHA512
10d23b5e4f157dbbceba0df2028a8b388e174c36d250e97e05b3e9714a7c1ddbcc1052c6b3672352e806d43bc699aad3254efe87e0d40cb5a9a2e753d84a88e7
SSDEEP
1536:Y7BstH7q/MMWhI442XRXyWXPtzb5Z80poeQunVB:wBG7uMMWu2X0WXPFxpo6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0009f19d73cd7cbe9990b8c65e46787f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ