Outt
Sett
Behavioral task
behavioral1
Sample
0d091e508d7eb46c0c929349fafa5e8b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
0d091e508d7eb46c0c929349fafa5e8b_JaffaCakes118
Size
57KB
MD5
0d091e508d7eb46c0c929349fafa5e8b
SHA1
b238e5736ac9ab11ee0523300f4c6e7fa18706dd
SHA256
d15fb6304f8fe16e39522d19ee737dc7d20abdc361b3c3c410418a23f806e059
SHA512
1040edd409fb3f1f3901ed3671d9fd45cc8aa801499be09bc1c277c6ed6911a6a70e6c3d99934e8db82c84e0f336aa60160d3758c9067f93e7e146cdb9295a8d
SSDEEP
1536:2hq93DBaqIdblg9iXU2WbbW/7doTeE0XjO:zqdjU2cCjdoTpYjO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d091e508d7eb46c0c929349fafa5e8b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ