Outt
Sett
Behavioral task
behavioral1
Sample
7885a9851cf12d894aca80b1fe24e8e8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7885a9851cf12d894aca80b1fe24e8e8_JaffaCakes118
Size
43KB
MD5
7885a9851cf12d894aca80b1fe24e8e8
SHA1
e80b214f804b38d5713645c115445598eab45cf3
SHA256
6203fdee204e168f39c629fe23dd2db6d3782d7029d0c2e9cb3b9d478ca66034
SHA512
998bffcf47fce05fb7df40e5131aa3c7066ecabcfaa20c1fe1f267bf91a9a8afe9ff2ad8c32173f7d0c0c85a3cea3cef12198d344a1ad81dbce40e563b0584a6
SSDEEP
768:szM2xVVugAGfhfuOudRuczcYae7PR9qOd/mkZ5uAAHNA:V2bogfcdR94Ler3Z1TXiNA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7885a9851cf12d894aca80b1fe24e8e8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ