Outt
Sett
Behavioral task
behavioral1
Sample
00506c2e7a7a153071498e341b9ba2f3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
00506c2e7a7a153071498e341b9ba2f3_JaffaCakes118
Size
67KB
MD5
00506c2e7a7a153071498e341b9ba2f3
SHA1
da5f73801606bff0f55393b7a500864a566db0b0
SHA256
edeb44e1292a4b9902634ed18a672c579b806346d20bf86c8fc8fa3a89a74e01
SHA512
32e6013039856e1b8e9b886f0d5900a08468123efdfbbb8342ead007e79a47f3d85e5a0f4bab4e1a38d40eca000b3a8968ea5a09c55ccf318119b88baa138833
SSDEEP
1536:yHZKStq6zYIjv4v1FGafesK3SFUF+dByV3c82CeRnEwa/5:yH5tq6zhv4NFG3sKD8ByV3V2li/5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
00506c2e7a7a153071498e341b9ba2f3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ