Outt
Sett
Behavioral task
behavioral1
Sample
0d4b9526e7124981572f9435a6475f8d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0d4b9526e7124981572f9435a6475f8d_JaffaCakes118
Size
48KB
MD5
0d4b9526e7124981572f9435a6475f8d
SHA1
46a8daa4b1c788377cb8e01537aa74e22678702e
SHA256
86dfb14bddb99acd9b1485d9bd3707b95fb4eb8505a68133f0600a0665ceb599
SHA512
ecd7b92993001b80f99f7d80ca8b0066140e9203327ccda593d24de6b04a5d9e0b8b8a00a94e57306a7b493e77404181fd18cd7d3bac58f7e4bcbb81c3ffb5c2
SSDEEP
768:4X07tGPXE5WnLisqD2ixqWY8CJDRGCn7r8VvSnp7W7cNy6ZcI:4sKXE6qD2f88RGwQ9DszD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d4b9526e7124981572f9435a6475f8d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ