Outt
Sett
Behavioral task
behavioral1
Sample
53e2b448a83ee1967571194e82703d57_JaffaCakes118.dll
Resource
win7-20240903-en
Target
53e2b448a83ee1967571194e82703d57_JaffaCakes118
Size
51KB
MD5
53e2b448a83ee1967571194e82703d57
SHA1
a5421ae2946d48936eeddfeaccec13a593034ddb
SHA256
ef561918298f1b57168f8ebaaf0cadb2995d137ab6bf95e3b360e369e7eeb1be
SHA512
5f1647bdcfab68b773c3c9638b96b7d1f090179502654ca4937404086854b5fba34ba1f3e28bb33206b9e502e45d09f73dd78a07c2b72a2a0bdb3daaf65add78
SSDEEP
768:z3OHS8KOz2/M/ZQ7QMKELnsjmsZe4zOxeKzPXpSAfXH4zBeIpZwSEROftnq9O9b5:yHZi/M/ZtMKEbuAecPZSAfXEBl2OfU9K
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
53e2b448a83ee1967571194e82703d57_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ