Outt
Sett
Behavioral task
behavioral1
Sample
167cd2c814a006e83ed40ed6de854c5c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
167cd2c814a006e83ed40ed6de854c5c_JaffaCakes118
Size
71KB
MD5
167cd2c814a006e83ed40ed6de854c5c
SHA1
47b80547421f070b39265ede35969435d57b1a12
SHA256
cd6f6502cc9d8d9e90f0f64bca17b5ee82f767c00a225ac400fa99219950fd89
SHA512
0b6dda46b763eaf26a4a7caf60e288fd9f26fe89a8ecb0ba695caf90724f862b62d3b19019cb6e02ce4a9498568eb878f8f0f2c77207dce9d56301d17caf0347
SSDEEP
1536:GQ3tfgXKQWAGzcvQERfyA5CickGqy9zY5Wc3JeEBszhBAqNvc:VfgXKiGfERf5HcxY5tKzhBlNU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
167cd2c814a006e83ed40ed6de854c5c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ