Outt
Sett
Behavioral task
behavioral1
Sample
26e1d08bd72486861904c5252677310e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
26e1d08bd72486861904c5252677310e_JaffaCakes118
Size
59KB
MD5
26e1d08bd72486861904c5252677310e
SHA1
5da4f01bbc9bd9475001cdb23923c246c87d6d1d
SHA256
7773d258749694284510cc2926ba61d84813c1d37510d6c5a1fa78f02581a4f5
SHA512
cc6011fa8799d054725a4d9e74baf6d7a7e8ce813106a1b98c4c7fbaebba5e2c031f86b55e984868756ad91d051eda0818f84772e08bc4b6ebccdeeb6395026f
SSDEEP
1536:jZIcCxR/hU4OkcwdXR1KN0xtt9qIb72hSOF:x+puHOXRf9qEyhS4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26e1d08bd72486861904c5252677310e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ