Outt
Sett
Behavioral task
behavioral1
Sample
81e2ba91f34cdbb57df6a3c093f6e894_JaffaCakes118.dll
Resource
win7-20240708-en
Target
81e2ba91f34cdbb57df6a3c093f6e894_JaffaCakes118
Size
63KB
MD5
81e2ba91f34cdbb57df6a3c093f6e894
SHA1
a624e6b264e72d57122d45bc4c65b62acf07a4b3
SHA256
08cc67418093d9f01c16356a5610099f6afd46703a08bce0d8502bfcb7fc2cee
SHA512
4becd1695d73e534270d741e340e2cdb0001bd4af23bff1396953c4d4e5101277ef70a39a6267ae4ecf80c3d94859921f1e188f6cf149e6be2a463efb21aee94
SSDEEP
1536:vHzzlDVhh14FA2RLYKpOhRkT037fBIT5/+MdVj0S7:vHfNZOFV3UkawtdF1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
81e2ba91f34cdbb57df6a3c093f6e894_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ