Outt
Sett
Behavioral task
behavioral1
Sample
0cba644fd213e9097ef0a96240f56614_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0cba644fd213e9097ef0a96240f56614_JaffaCakes118
Size
65KB
MD5
0cba644fd213e9097ef0a96240f56614
SHA1
a5f35027151a1b04d9c491a3a4135b6c2591fb85
SHA256
e0a93b2995de8777049dc243dcccc05c6c51df2ce1e2d82a213ab4dc3dc122b4
SHA512
a0fc55ec876f30c7a7cf43ab49dbc67e41cc089f6ebf8e5d5d32f8fa6c64f6a74d057465bac9482f23fb688f1c08b3fd23edbf23c6c43d8637ce890ff11b31eb
SSDEEP
1536:jZIcCxR+nW5M5YiTRPgFd1CaQ3ig/lhL4JCyDo9a85+Xd2U:x+QnbyMev1CaED4UycMy+Xd2U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0cba644fd213e9097ef0a96240f56614_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ