Outt
Sett
Behavioral task
behavioral1
Sample
26c45f1a68a9815aaa29ebef27d67242_JaffaCakes118.dll
Resource
win7-20240903-en
Target
26c45f1a68a9815aaa29ebef27d67242_JaffaCakes118
Size
57KB
MD5
26c45f1a68a9815aaa29ebef27d67242
SHA1
86ee6fe5c70d587def89f39641b2a2a7cbbac4d1
SHA256
7cfcd33ab555b637f445926e30bb3527e7354d3c513a8387646341470a25cde6
SHA512
d1dbf4c3806335351290a1a16932918a5c21f6851c897b07f4bb36ad710dd2891c8873bd3083204ce7aa86659fa6a379db2f91c83b2d29489e37069d5928d64b
SSDEEP
768:4xFmDJua1lNAF3LjHTdO3njx93tb+PmiyFpMNL9Y7sDjLHddzhlnbIcjLBuB6:4xFcH1W3/zQT7wPBy3eq7gzbIeLBj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26c45f1a68a9815aaa29ebef27d67242_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ