Outt
Sett
Behavioral task
behavioral1
Sample
3d284a891e341757e7f406bdd1f792c3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3d284a891e341757e7f406bdd1f792c3_JaffaCakes118
Size
59KB
MD5
3d284a891e341757e7f406bdd1f792c3
SHA1
bc9ec7a5e743733bff4112fb50f5141afcf25571
SHA256
c65fe63be573d32e085a6b617ab22c27d9d75b3891047700a189b383623ff072
SHA512
565fa1e5baabb5fb6c604a5b9b4c7ccaa5027d2d273dd7c94284b8778bffcd93b3fd4260ba4a70ad0605013e697d339f793a9ab09ec8c0be5061f639cde1c36b
SSDEEP
1536:yHZC+sQM3KdxFzn+zLqE3KvU7iHr/97UOKg3:yH4+sQMUxFznWqI0hUw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d284a891e341757e7f406bdd1f792c3_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ