Outt
Sett
Behavioral task
behavioral1
Sample
0c15cf5751defd3e4e2933afac03e9e8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0c15cf5751defd3e4e2933afac03e9e8_JaffaCakes118
Size
59KB
MD5
0c15cf5751defd3e4e2933afac03e9e8
SHA1
5c5365bb368b99d622deeb74a468cfe3e48e9030
SHA256
e8758c77eb3297da9f73712e2b2765ac491016e68a0964beacd45c649e76f9b9
SHA512
e0126a52d061fc42e5d5d4053cdd8e88c81ff22c904e3cf1236105cab3eb6bc8fe9e5d1f03ca49a1f587e839229d4f105fcde9a69f5128b1580bbdd0e71e4c7f
SSDEEP
1536:5jRmOTuoPYYGIqDfwpyDy50Hvn+3BSHsW:xfTu4Y/fYz5ivn04
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c15cf5751defd3e4e2933afac03e9e8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ