Outt
Sett
Behavioral task
behavioral1
Sample
36d4fb0e3af9211c7209f4dba8b13da2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
36d4fb0e3af9211c7209f4dba8b13da2_JaffaCakes118
Size
54KB
MD5
36d4fb0e3af9211c7209f4dba8b13da2
SHA1
128316c64f6828ddf4ab693645a9d230f2331624
SHA256
78fc1d15edb50cd42f902d64db71b3328683dd90b39759818e437f3c5b2e9e34
SHA512
259d736c3b47499ffe08b424106e32f5b70188d2637568dff53341a137394c4ea4262499306434a855d9c570ee3438b5922b3bcb8708529e936e26557ff9f07b
SSDEEP
1536:Bm1NGJVGNglanlhftWJ3y+U0QIsu7Cr3SbqP7:kX0VInlBwLURIsu7U3M87
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36d4fb0e3af9211c7209f4dba8b13da2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ