Outt
Sett
Behavioral task
behavioral1
Sample
0defa8d5dc371696207137bb72d90188_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0defa8d5dc371696207137bb72d90188_JaffaCakes118
Size
75KB
MD5
0defa8d5dc371696207137bb72d90188
SHA1
973bc5b8c2ff153514b5919c4f5b254a86ecc0e5
SHA256
107dbe055e1e3a69ded383459a453cc8443cecd0523c5e6d11682326b02e1496
SHA512
1329c8e6aa58bed54f58e93c01d1a8376a8f2c62b83c528086c7d7e0b99ebaa68b17c7105b311bc0d131930c04881a679a6e7f64c88f3574c9464b796da6416f
SSDEEP
1536:n7ZLNPp9pZBM4+xDkd/jf9dQ2SPSUbKY7s5/LrPSGp0rwls4qKMBKxmj:7ZppUD81dwr5QhLRGKNeAxmj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0defa8d5dc371696207137bb72d90188_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ