Outt
Sett
Behavioral task
behavioral1
Sample
3e4de1fdcda11f7e261a9e43f54405aa_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3e4de1fdcda11f7e261a9e43f54405aa_JaffaCakes118
Size
80KB
MD5
3e4de1fdcda11f7e261a9e43f54405aa
SHA1
85dc2da96a40bb48e6a46ce6bc8dde2286b14443
SHA256
67ad5b35e8f0e8bf4a7536b852f9f5e68ed4fdd8f8ada5eef6e6a27f85d3bb7f
SHA512
047b1898c391f0673af72e9681946c86fccecb9bfb094d48ba44265b708effd1f88361735844ca146c47fa42cf5c546d028823034d10ee77cc9b97d8518f755a
SSDEEP
1536:Cn5P0l70x5CJpVU0DOlvskfELEPzJpZnIpKHWmY70kWwAzaYddFCU3I38rh:w5s70x4JpVYlxELELJpZnwmfkc2Y7Frb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3e4de1fdcda11f7e261a9e43f54405aa_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ