Outt
Sett
Behavioral task
behavioral1
Sample
81d45ced77267cb00d3332a331b1ba00_JaffaCakes118.dll
Resource
win7-20240704-en
Target
81d45ced77267cb00d3332a331b1ba00_JaffaCakes118
Size
49KB
MD5
81d45ced77267cb00d3332a331b1ba00
SHA1
a16e010a5d33c2e3a0eb83d896c4be7ac0e77f49
SHA256
162a29d3c033b7a178076b0af25d6d069265b8269ec93a121606372a00532902
SHA512
29d46172761decd6994907d24a4d6b42d5e35fbbd83efe0d0d8baeaf696fc71987eed8dfa5150a2a2883fb02e0c49734b6f1f11808e8702fc63a3df9207f7cbf
SSDEEP
768:26cTcjNp0oMrTo/Wxf3XUFOjNxFUYwoYPwd0NLTMDjboA3feEJMKpg3Yn:23umoMtxf0kGdoiwQMTRfdJMR3Yn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
81d45ced77267cb00d3332a331b1ba00_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ