Outt
Sett
Behavioral task
behavioral1
Sample
8234cd43ba2c287655da29bfb309a15b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8234cd43ba2c287655da29bfb309a15b_JaffaCakes118
Size
62KB
MD5
8234cd43ba2c287655da29bfb309a15b
SHA1
30e3c0f621dd990b9fad3708200187f88aa89d5b
SHA256
01b9a9535dcc594336efc88d236af774258cc2948536a719cb246e9aee78bb52
SHA512
0e232f63ae0cb2bd855a8b531a22748fb29132e169c9445fa6009af9e8df184e241410d81f290c606011eb2772e0d44a271f0879f9f06a0f8a90502f801644cf
SSDEEP
1536:n7ZLNPp9pZBMGqbRXtfsuiIOcTBrRC7g66lIcN6LQ0g:7Zppf0tiGPeE664kv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8234cd43ba2c287655da29bfb309a15b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ