Outt
Sett
Behavioral task
behavioral1
Sample
435c13962ed385f2ad03c1b7f831c8ea_JaffaCakes118.dll
Resource
win7-20240903-en
Target
435c13962ed385f2ad03c1b7f831c8ea_JaffaCakes118
Size
58KB
MD5
435c13962ed385f2ad03c1b7f831c8ea
SHA1
709ff94a7c9dcf5a9106cd65852eeab5a6b06721
SHA256
63d1b5338257e33f948225fb772fb86d431ae560b3a45bd06f5313099d50adff
SHA512
2a90a70e6a00242a7c147f8aea60ece3bf144ade6b7acc54682e88c3110de1da0e7733b2e80ff91de5de45ecc8582c4bf5a19a17479ca7eb41f2d5f25f112496
SSDEEP
1536:1kKcnpm8Zrsm6yv4EnrBkGDlUtzJ0ip64/:1Qn08NZzSGSzLp64/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
435c13962ed385f2ad03c1b7f831c8ea_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ