Outt
Sett
Behavioral task
behavioral1
Sample
2e105f2107e543c41342d81c9852db1b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2e105f2107e543c41342d81c9852db1b_JaffaCakes118
Size
60KB
MD5
2e105f2107e543c41342d81c9852db1b
SHA1
62c7c677a9e1b6b550cc65d609507b5915eb4caa
SHA256
19582af94bc66841d3f860aa5b13f3d2a843e5e22cc37224b2fd9e21a90380d8
SHA512
fba91a578f6e2ec13e22ce3d5f7b7716dfda177bef04caf846b7fa7ad283c8d6806045873168bd2457f7200807524c964e75efe8674abfa7309f62caaa1e3b4a
SSDEEP
768:nbY4l8ekceRm/cKChS76hVpyIsRjXQP0MM0k05723mVa+HvQR+/KzVwE7mUMn5Re:EGcFu0WnC05s7qM7vQEhEOviLV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2e105f2107e543c41342d81c9852db1b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ