Outt
Sett
Behavioral task
behavioral1
Sample
40358a77d6698b9133c9f96845969916_JaffaCakes118.dll
Resource
win7-20240903-en
Target
40358a77d6698b9133c9f96845969916_JaffaCakes118
Size
66KB
MD5
40358a77d6698b9133c9f96845969916
SHA1
8c00c8aba034f287b4c0a1a04cdddaf4161e1ec2
SHA256
65b33450b6c9ebb565eb7c0f09b9a635bdec2631dd5cb74ae891ad7980305ea5
SHA512
8b5995d1959eb77de176ec71be50b71aad2ebe3b107a54d0dadea0d3c99ea8dff1bf9dc2f9508cd8151b30660c631891e03e490751f4b0a254ed136cda7447b8
SSDEEP
1536:p+CZ8LwKKjTAq52EFAZiZHyOn/owd686xFtmR9rkxviNW:gXEzsEWEHdEvQ9rkZD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
40358a77d6698b9133c9f96845969916_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ