Outt
Sett
Behavioral task
behavioral1
Sample
821ce8cebc909db0b5bbcf52cd05d62e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
821ce8cebc909db0b5bbcf52cd05d62e_JaffaCakes118
Size
74KB
MD5
821ce8cebc909db0b5bbcf52cd05d62e
SHA1
2e6e973b9db548e5fddc4eb7c0c93670e751e5d8
SHA256
03875beb454af978924a2c13515e40752bbec9afb0888c422ca0e9a7ab297100
SHA512
7e31b4bf73afc5995813f1541e0b38f444ddb0670d4ac1ebf45096e1289d795f142fad706b3369ecd32a6fc97856da4fa60a268eab7742de7c70e2319a1850ee
SSDEEP
1536:anRbr1h4vWqkATnobVyYJrGGobLzW9Qa9Em/iIIFY:aRbxh4OPAGyArxovzX6IC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
821ce8cebc909db0b5bbcf52cd05d62e_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ