Outt
Sett
Behavioral task
behavioral1
Sample
JaffaCakes118_e25fe52a3487bc122af3a925786a60c9.dll
Resource
win7-20240729-en
Target
JaffaCakes118_e25fe52a3487bc122af3a925786a60c9
Size
53KB
MD5
e25fe52a3487bc122af3a925786a60c9
SHA1
b50a202115309fa5b157b9f0473bbbb0104ca4d7
SHA256
2eff5c31e3158490f261d8ed761ce521d63b635db883991d961acb3dd236f5f7
SHA512
2a4f3cb572be7dc87d8a70068964d7aa29b4f4d5352b2793621803bcb955faafdeea0ca4c94794fb541a726caa181b447441c07dd04ac08111d29b5cb512ce0f
SSDEEP
768:GbvLDaaMact8TvOu6CcZMC3j9ongiACpe2yxr5h1ylqoe0sFKJhf1NfF8zCknN:evKjSC3jhifo2k5h1ylBxJhfF8zC4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_e25fe52a3487bc122af3a925786a60c9 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ