Outt
Sett
Behavioral task
behavioral1
Sample
2e7919f15aee21dca455f5fcb9754e03_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2e7919f15aee21dca455f5fcb9754e03_JaffaCakes118
Size
60KB
MD5
2e7919f15aee21dca455f5fcb9754e03
SHA1
473139f7cc9f8a7663de73b27fcef7ece3336cd1
SHA256
341157f0bf70cebd4dbc3dc7f61490c08dfffcb9b370d3a04f3aaac0a985ec22
SHA512
02f00abe09d6b2fae12999f9edc0af4055de877b08103993da342094a8b9c77bcf7c53b8497d37ad6280c302375e86e9aeaa39f19cdd54b5418172a3e40e4786
SSDEEP
1536:Bm1NGJVGNs3MVDheHlaAcdAbri44r5HvSQH+P:kX0VVMVDhklaAcZ44rBzHI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e7919f15aee21dca455f5fcb9754e03_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ