Outt
Sett
Behavioral task
behavioral1
Sample
3c5746d7c1330958759e15024132f417_JaffaCakes118.dll
Resource
win7-20241010-en
Target
3c5746d7c1330958759e15024132f417_JaffaCakes118
Size
71KB
MD5
3c5746d7c1330958759e15024132f417
SHA1
97bfc099868811d845f2b4688ce87fef8b2ece23
SHA256
78a4c2cf148e624ba8b372b1ea17628d12437e68429bc0b4e9d2e25870a0636d
SHA512
4b009472ed16a6a3aaf9500f95cd10348f609c4d4aecc0a437690a345a0635b5b83238aa6dabce1467f0cdee2dad725cf21f282cc61faba17faa523bc7870bb4
SSDEEP
1536:1zExMwCGQ2j9cpoGZzEnpFwQek2wPPg6Ieowr8l83JEgy0bCbGs8wA6uLw:1I+wCGvM1Z05Jg6Ieowr8OKD0CbGhs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c5746d7c1330958759e15024132f417_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ