Outt
Sett
Behavioral task
behavioral1
Sample
0f6d407f64f003e13ff6ff780fc0be34_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0f6d407f64f003e13ff6ff780fc0be34_JaffaCakes118
Size
67KB
MD5
0f6d407f64f003e13ff6ff780fc0be34
SHA1
3d840e83399eedbb3aaceb6adda2bd6f726bccdf
SHA256
e19a9264ec129cad8040c90e2f6a5656b93aa8a32be161ed5c5d3d70d1c00dbb
SHA512
be2fe0d2af2be7d8fd9deea7c5d73a8665accea123e8dff2dfa75d4fb539f3413f14564b846336dfe21d9836b8cdb1f5ef6a1d010843d146ec7c87bb3c612991
SSDEEP
1536:GQ3tfgXKI00kiYV4Bhy6E5c1Xp3H+E5E00dTOhk:VfgXKI0hiYWBYY1XJ+EcdTOW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f6d407f64f003e13ff6ff780fc0be34_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ