Outt
Sett
Behavioral task
behavioral1
Sample
04c8b38f775c4f9bc789d239f92804af_JaffaCakes118.dll
Resource
win7-20240903-en
Target
04c8b38f775c4f9bc789d239f92804af_JaffaCakes118
Size
53KB
MD5
04c8b38f775c4f9bc789d239f92804af
SHA1
9482e7236dbefebd5bd5f67d0dc02570752874e7
SHA256
e4b7fd2cc94b874d8e84f310e4d7f30838a3ee1dd2ed5de2696833dd7ec0451f
SHA512
1d6515d7d7661f0ca0e025a96f941f837062e072d5f34432b8b7143934417feece89b6a6f440a8236581f59f293295820fca64baa217fe1e981a6a2778bcb1b9
SSDEEP
1536:n1imrXTiRFTkAutrZ6L2tv4v272Y4byLoj7A1:nMoXOTwUOvD72YSB01
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
04c8b38f775c4f9bc789d239f92804af_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ