Outt
Sett
Behavioral task
behavioral1
Sample
10d228cd12dcfe2757b7a49376a66813_JaffaCakes118.dll
Resource
win7-20240903-en
Target
10d228cd12dcfe2757b7a49376a66813_JaffaCakes118
Size
43KB
MD5
10d228cd12dcfe2757b7a49376a66813
SHA1
95935cedf5924d5ed23ecb261637e73f08889e4f
SHA256
913830ed2a3e1e9438c73233fb9f079af3c8762735d01e68eaada789329a4617
SHA512
1892c1613362e539d33b54eaf6de5504a9f74a826523b7d64d9f719f55019ec279789c75b56c6521e26bbdbef064a26cec9b089f22b0fae8873c719162ee4b83
SSDEEP
768:szM2xVVY1Yexs237Kwy8bqopl9Xe+e05CMscIcj+UkINHltuvgd0PIiB3BcL:V2b217r9Xez05DscIHUkBodp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
10d228cd12dcfe2757b7a49376a66813_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ