Outt
Sett
Behavioral task
behavioral1
Sample
549dfb947facb4a1beacc23d06caf9e0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
549dfb947facb4a1beacc23d06caf9e0_JaffaCakes118
Size
52KB
MD5
549dfb947facb4a1beacc23d06caf9e0
SHA1
7a85e641f9c74ad09fb4819bf021c17ed006e68d
SHA256
444c6567a2e268d6fed57c69f1d7cf80aa2b4708ff7781ed15be4faacfdcea59
SHA512
a1cd7ce1effb10394d049578ddeeb5548f4737f3bd8c29b9c1fcbf0e4161bc83aa829b735e6c8af94fa061540fb17cd0bd8c5f80ca63cf38dcb4a4115764c521
SSDEEP
768:nbY4lRn7C3Ugb8iVmiXk+zwaS30u//dklFWmdCLZzB3aHHk0:EGx+EEMitzwaqd3ClFWmAdhWHR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
549dfb947facb4a1beacc23d06caf9e0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ