Outt
Sett
Behavioral task
behavioral1
Sample
16c0635e552cf48171a7ab5a46e1b076_JaffaCakes118.dll
Resource
win7-20240903-en
Target
16c0635e552cf48171a7ab5a46e1b076_JaffaCakes118
Size
58KB
MD5
16c0635e552cf48171a7ab5a46e1b076
SHA1
7c3f4d71520ec73b98b70ebbaad920fedede2e72
SHA256
be4aaeddafcbc1361c77c4c098c9372671817acca7158005ffb946f6eb54e64d
SHA512
c877e9f7977704e341e080b20876b983bcb70e74e1ecef7b46b0faf1573bfa986ec4db4f381eb8d1e3bc7f2a911ad9b0e45a2f28dff368b97bcf58601195bea9
SSDEEP
1536:HKvv9jeCw6l9n+Eu2UBnlWshAShMdcQbe3Y5sTxhwP/GeNMOvrf:TSHu2UrjhlhMdzbuY5sTcW6v7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
16c0635e552cf48171a7ab5a46e1b076_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ