Outt
Sett
Behavioral task
behavioral1
Sample
100eceb215d79165c759e464bf17cc7d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
100eceb215d79165c759e464bf17cc7d_JaffaCakes118
Size
54KB
MD5
100eceb215d79165c759e464bf17cc7d
SHA1
8a8e9ba081ed70ca93738fac2593e9cb6d6b109c
SHA256
f512b5092ae027590fb8cca87c52ddd80756cb6b4e2c1106d2498c3442c69882
SHA512
959734323b1df1872497b5accacbb7b50ea4e42f6c6115bc1f53ceb4410d0e02afe4b6e1af6f40033ffba09ede41b5ac7009c1ad6abfff6d781acbdd3badc5ff
SSDEEP
1536:4sKXEIjVDPtjY0d/pifW/jjErk3A6T7SE6iOkCcPCv3/O:NejtjY0d/kW/dw6PSE6hcPb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
100eceb215d79165c759e464bf17cc7d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ