Outt
Sett
Behavioral task
behavioral1
Sample
538fc799860c85b08d99a40884041f01_JaffaCakes118.dll
Resource
win7-20240903-en
Target
538fc799860c85b08d99a40884041f01_JaffaCakes118
Size
77KB
MD5
538fc799860c85b08d99a40884041f01
SHA1
479cada5fa54d329935124cb40b6280e44090639
SHA256
e68a3cb5ef4ccce3babf84a0592f1dc6eb568f238b09d8f66396dac97ed1bcc1
SHA512
32a66c4a1ba8b3acee038f515aeafdd5c9150b05db6d5364fcaf6d40f04e18c9e3e853abe2415b88d97494949dd2d6c336b52512f54eaf514be91d7b9d11af6a
SSDEEP
1536:2LOJMXV60IXOewLFle12C3jteCi1s2X23xlpv3rN1S8Cj:2rk0Le2e12CRehs20rN1JCj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
538fc799860c85b08d99a40884041f01_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ