Outt
Sett
Behavioral task
behavioral1
Sample
14f53af9202827c154b7ab92c9d11568_JaffaCakes118.dll
Resource
win7-20240903-en
Target
14f53af9202827c154b7ab92c9d11568_JaffaCakes118
Size
73KB
MD5
14f53af9202827c154b7ab92c9d11568
SHA1
072527d328b4d85a0cd803cb78d5d976f55b0f40
SHA256
cb5d4d213385d394c552c9ccb966d5110185756e1427b69b6914156ba23418b1
SHA512
33188c7546d52823aaec904ff95b88a17b384f6f271fbc6fa821325052359777d4176d1ab4cfccaeb782c7f796d89d845beb4c5177fc03a6ca9373968c6045c0
SSDEEP
1536:RVzMze0R8Q9UokPVT1wmH/y5FjyUu4YHahkRKVGBz28r9RvpTO:TzMzh8QqokV1wX5Fc4YHekRKEs8rbvtO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14f53af9202827c154b7ab92c9d11568_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ