Outt
Sett
Behavioral task
behavioral1
Sample
53cc008b8568928ffd38260f3508e1e8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
53cc008b8568928ffd38260f3508e1e8_JaffaCakes118
Size
64KB
MD5
53cc008b8568928ffd38260f3508e1e8
SHA1
7e9e1048c900a68599f07e95732c46757365ab95
SHA256
cd8ce119dfedcab1fb8f1ddec48a214d64b71b28d2883a0737faf163920bf74e
SHA512
eb34caf0e9b3f2c19a8d03a3290258b7405f28cf44ee917e5e5fb62fd028b5f0af4021b1f00167803c5d1d304c6df3bfa2f519be38bfe665bbd7e36b3d878bb4
SSDEEP
1536:yHZe3ssgY3HVfZjsLwpMmDTweMdtJRhhSV6ypoj35pG21it:yHLsg2qLwiJtpo6y+j35pGvt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
53cc008b8568928ffd38260f3508e1e8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ