Outt
Sett
Behavioral task
behavioral1
Sample
3d0434152fbcea00c0466263d022ba12_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3d0434152fbcea00c0466263d022ba12_JaffaCakes118
Size
50KB
MD5
3d0434152fbcea00c0466263d022ba12
SHA1
cfa5b9f67a719e7d75eba8f7e41c7f891a8bfaa7
SHA256
e0c5b65102dd116c3b04ed329e5efb55f4d48866fc066ea164c877956afdff18
SHA512
ae10fe733341b745cdc5261ee4d6ae85a0f809fafaaa278e314f978940efbf9ea486f0ccddd9c6b303fa158ec4c6380624558381c982efd492cd4b191ff8e1cc
SSDEEP
768:n1cPm+weMu9EEhxjU93W3GYEfnblOOhDe6gbkhTHhc/NIAys:n1imSO13bYEfnblJEOHC/NTys
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d0434152fbcea00c0466263d022ba12_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ