Outt
Sett
Behavioral task
behavioral1
Sample
147972ef774d6f47383724df57998681_JaffaCakes118.dll
Resource
win7-20240903-en
Target
147972ef774d6f47383724df57998681_JaffaCakes118
Size
70KB
MD5
147972ef774d6f47383724df57998681
SHA1
4b57bbf0a882191f023443e648a6b1a7e6675b63
SHA256
a9c5251d69940f2ece2116b652764a5e6302ee37404804b669695015c6fd257e
SHA512
308a8e95a9875d4b82c1dd631046cfe3037d7fe65d4ba469490af460f6ac580c470d8339ce7d07bf2ff129e6a1caa1f09dd7a7d22f59f1ff3a26cea1efbc44d9
SSDEEP
768:GbvLDaaMact8TzOXRcFLUTnFGB/qkehA66LyY6kE5+gfWRM5yZ8tKWrswBuBwJs/:evuB8UTn0XvMYVEgG5yWY4i124S9xjFc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
147972ef774d6f47383724df57998681_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ