Outt
Sett
Behavioral task
behavioral1
Sample
71d244e151b10cd3084d83fd0d82884e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
71d244e151b10cd3084d83fd0d82884e_JaffaCakes118
Size
80KB
MD5
71d244e151b10cd3084d83fd0d82884e
SHA1
c088ef858755d5648994c1378707f31bb896519f
SHA256
e4811d276b0a6811bbb4877b3cf9de065c6763020b8a177706f037ea90d488f6
SHA512
009a3c1c2c30852e85592553976b93145706a726195e6f743ea8335411b205212374924105e14a2064584c844329a2ea5d766780653c022c3456674d17268195
SSDEEP
1536:UH3tsZhZnBwXnDc5uW/vRGYTn14dt01UvEE3x+OO6mfRu/Dphlv:UH3GBw345uIB12RvEwK60Mlv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
71d244e151b10cd3084d83fd0d82884e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ