Outt
Sett
Behavioral task
behavioral1
Sample
2f05943f5b28827c3e4ec556fcabe236_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2f05943f5b28827c3e4ec556fcabe236_JaffaCakes118
Size
54KB
MD5
2f05943f5b28827c3e4ec556fcabe236
SHA1
590996d2474ff8c60b0b972a6a336b85cd3d7643
SHA256
427020261007378921427b92f2812c7d71b502e83aa4a0065e051443bf294a23
SHA512
12c77198d72ed647b8d41936d53393d77678471ac666d8dd249a40010c1c0f8f644226e20390e2db56930238feb6dc97cfa631e4ea27b41e8058184be4fad20f
SSDEEP
768:Gx4m7JNSll3dTG+qNWpV5PHRXDwuGu57jFeYQYI4FWjRgFFreGjwJWEdDz:Bm1NGJVGopTPH9DhovYctcSIGv1z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2f05943f5b28827c3e4ec556fcabe236_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ