Outt
Sett
Behavioral task
behavioral1
Sample
2c9a62a1e122475366ea756e5f806705_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2c9a62a1e122475366ea756e5f806705_JaffaCakes118
Size
59KB
MD5
2c9a62a1e122475366ea756e5f806705
SHA1
99e049ed1d6e4e196749a97683decb61fd79606e
SHA256
18954d3f3ef0c364de103aa054b0e8b22a311da16e7676c1d10656e8368e9e19
SHA512
7c2fd21725e84d4c4bae844e0bdd6d210d7f712a7ee56a8f8bd8d50052b1bf59b842fda07b8e8ca3e6cf1d8f3aff0e613ab19f39a5712a44ee9a3faa528478b4
SSDEEP
1536:V8O9Nn6RjricvI16fJWL+IeK7UfJ2bC5Op528ac3:2Oz6VWcw9LfTcp5Op5f3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2c9a62a1e122475366ea756e5f806705_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ