Outt
Sett
Behavioral task
behavioral1
Sample
128413fd6c9b959112bebf952d5cc770_JaffaCakes118.dll
Resource
win7-20240903-en
Target
128413fd6c9b959112bebf952d5cc770_JaffaCakes118
Size
57KB
MD5
128413fd6c9b959112bebf952d5cc770
SHA1
58d611cf90d0a207633156e66f75c827feb43294
SHA256
148b47971515ec273fe0cc664506e1583f64f8b752d50a6b68736ae6aa747351
SHA512
ec9ad43568dbe497b89d6dd87461e377bafc524b50f6a7dcbdfbca4407c507fade0e5d235a999a88f5359aafa2f1eaccd074ceeb160fbb732f1795a0e976a54f
SSDEEP
768:h8WTpVT0X8zbXQf/OZh646naR4LTdaJrGnxgPgqw2vkKI9dhFxsJeN9GVZsJKHBr:RVcf/m6aqewmgqpvhG3sVZsJwYW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
128413fd6c9b959112bebf952d5cc770_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ