Outt
Sett
Behavioral task
behavioral1
Sample
2a21cf92d603d6ecefe5b3f276577a2e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2a21cf92d603d6ecefe5b3f276577a2e_JaffaCakes118
Size
67KB
MD5
2a21cf92d603d6ecefe5b3f276577a2e
SHA1
1cf6a9f622ad9b1279e9f5e6d9d9261a0922218a
SHA256
a492efbc8299f128d1e5064375de455730cdb086fcf2a3f9968d7f8c242355a7
SHA512
c9c261939926624f571c3b5fa24e2ec2e4531a5eaf5cd100a184fc62d45cbdec5906bcfad4e85282bd8a5c50b8b5a36ccdcdddbea5421b4437d73ad6b1102ae7
SSDEEP
1536:YH5NrmoAA1UNr5oFnIZEDA5amIAqu955j+p0h2Eg:YkyUNkzRTAqu955j+e2t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a21cf92d603d6ecefe5b3f276577a2e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ