Outt
Sett
Behavioral task
behavioral1
Sample
823b4a3f81099cb1e57083a26433e07f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
823b4a3f81099cb1e57083a26433e07f_JaffaCakes118
Size
61KB
MD5
823b4a3f81099cb1e57083a26433e07f
SHA1
235531dca4e620828de430f7d3d2df3cff00be81
SHA256
2e487b9df525224b623c824ce3112cbbca14370e79e07b362aad77f894d7bda2
SHA512
05f7786f1198fcf6f1d0594ea588bf33e45d870b43be8535bdcf45422f49a160d690ede2461f64d4aaf0b500f9e62e45a6d5841430664782b03058113912281a
SSDEEP
1536:5jRmODYcwVhvZJeSawSdobzmYWUqSlm5OyHdm7Y:xf8cwrZkgSTHUqS/CU7Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
823b4a3f81099cb1e57083a26433e07f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ