Outt
Sett
Behavioral task
behavioral1
Sample
006d524136c6e18834ab4cac62472e32_JaffaCakes118.dll
Resource
win7-20240903-en
Target
006d524136c6e18834ab4cac62472e32_JaffaCakes118
Size
67KB
MD5
006d524136c6e18834ab4cac62472e32
SHA1
20fbad498588b8a49daa07b9e145ad432b2bd980
SHA256
63f9f78a4cae9488146d8054513787b3635c0f606e5d958a7e43f547618412d6
SHA512
af7d8dbf1655be9ea206591d798b348efe06083212337fa42933c91e072154a2d966930882156f405cfd273fdf54fb454d749c26edc272378df7bb6c0b716c7e
SSDEEP
1536:8xdfzUO04U6m+Z7dNKFzcyaG41lvGo4IbGMjzkwoY6ArfA89:uxzUUHmaqAyaGq5GQZAlAzAO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
006d524136c6e18834ab4cac62472e32_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ