Outt
Sett
Behavioral task
behavioral1
Sample
0c27cd0deb9f1509e61bcacd71749646_JaffaCakes118.dll
Resource
win7-20240704-en
Target
0c27cd0deb9f1509e61bcacd71749646_JaffaCakes118
Size
58KB
MD5
0c27cd0deb9f1509e61bcacd71749646
SHA1
6d37b0e9f0354c23e9b38396254c8f6074a2ffd2
SHA256
814140bbb8bcc8f7165e6a1d01df876509c4c8ae71d1b640c08623c4861fb3ae
SHA512
c8e2082cd113bc8535cee4fb2c7c887b7c65d0453a846ce99ac5b3adbe5400d1d0225173db8f2d70fc715e2006e60069a5dfd08ba2280442f6a6484a9c518cde
SSDEEP
1536:wXx6VwR/O3Bz5aflrRybm6PyBYvNfTN5e:IgV4mtORyblPyBefS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c27cd0deb9f1509e61bcacd71749646_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ