Outt
Sett
Behavioral task
behavioral1
Sample
41652eb9604ffe9c251f1e1ef6f23479_JaffaCakes118.dll
Resource
win7-20240903-en
Target
41652eb9604ffe9c251f1e1ef6f23479_JaffaCakes118
Size
56KB
MD5
41652eb9604ffe9c251f1e1ef6f23479
SHA1
0095e461ed1e835f05dff9492b86177b49080ab1
SHA256
d84c7545104d5da1ac1811145bfdb9315eea28dbd1287b64411f92a472a5a557
SHA512
ce74870bd3a281cc731e7944115ebdf0ef2db5757f193d91f635406459777f3bc23d353bfd7c99c45674cc1cf5a73f2ea50287ac16fa39a4ba425c901fcd315e
SSDEEP
1536:Mq/JmJSP9NTd7tBmWT3ifrQM19amV7Iu8:z/JmJSP9Bd7tB7TSfrHai8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41652eb9604ffe9c251f1e1ef6f23479_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ