Outt
Sett
Behavioral task
behavioral1
Sample
432de2342a9de657e236e026ffa30da9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
432de2342a9de657e236e026ffa30da9_JaffaCakes118
Size
63KB
MD5
432de2342a9de657e236e026ffa30da9
SHA1
dcaa2d366e3a85f6b87e9e8fe57f6e1eec50d0e9
SHA256
bc3df7943fc3d07055c67d1164d87a481a151dcfa6bd0d2e8225865e6cbe8253
SHA512
8786cd29ffb7e3e37d55fd05ea94c00bd1b23ab0a92f628ff10e43c35ac92a218f01b13125d50f9af405364487e86816257dd9b3d2f7802806b1c9dccdde134a
SSDEEP
1536:e6PViKygH6ExKuDYj8kVOxF3lIWkvfsD6WJ6M+8:RViKT6ErkMxFeWkcD6WJf+8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
432de2342a9de657e236e026ffa30da9_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ