Outt
Sett
Behavioral task
behavioral1
Sample
2a34082259dc349918728ba6f7f150f2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2a34082259dc349918728ba6f7f150f2_JaffaCakes118
Size
64KB
MD5
2a34082259dc349918728ba6f7f150f2
SHA1
42c9f2f604ecf1c72a8f2024677c0ca01e71c98c
SHA256
434933d7de7d3ac279d5271708a99d90bd718b5a3f48156a7d9835837173781a
SHA512
4475a3103c6c42cc5f042d8b479f5ea4af5cb7e7b8fbf4830b9a2a84ad0aaf1695a288b1931ea8cdae20c056ccd69376f04756e12048f7e2a74c4dad011033b5
SSDEEP
1536:qmmMrSpuDG1M2B3RS5fXScoXUN7i5cybh:QMryyGj3RASsti5cyV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a34082259dc349918728ba6f7f150f2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ