Outt
Sett
Behavioral task
behavioral1
Sample
0d558f1f3f1af38b8ec3d902a04ccbb5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0d558f1f3f1af38b8ec3d902a04ccbb5_JaffaCakes118
Size
60KB
MD5
0d558f1f3f1af38b8ec3d902a04ccbb5
SHA1
7fb8e6072279406f156c38116fe2e5636e1b3306
SHA256
f11c22fafc0fb62a6c368b5fd57757424c4c5f1c3da733fa15ad56e78b44b305
SHA512
a7006732d80d63cefa4f63dc60b4d25fe34c794bbd8886ad72c15b37638b08fd55ddee2fe39516cb6af23d7e4f8580500dae3474d1df4820f52a83e1054b136b
SSDEEP
1536:evlNnvQpRnBGMNhmeIKwJko3TVFBc7YioE+Ynh3lOKd:EtIp/GMrma8JcbB+Ynh3lOW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d558f1f3f1af38b8ec3d902a04ccbb5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ