Outt
Sett
Behavioral task
behavioral1
Sample
828a55e06ce5f4751b3927f838b98982_JaffaCakes118.dll
Resource
win7-20240708-en
Target
828a55e06ce5f4751b3927f838b98982_JaffaCakes118
Size
65KB
MD5
828a55e06ce5f4751b3927f838b98982
SHA1
8192ba1115ff06566759c8017c52ccfccc3e2be8
SHA256
45a11cb2df90ef93c58e8ccad8468bb6408e3c2b8b6d0d24d059b09325a10947
SHA512
3cd2f8b94ae3369f98bfa7466ed148c567ce23e04a2fe13c363844edf8d842cd6b17999b04a781a2a5147e543027364ceffa8eaf2cd7e9f5bb45929ddd07d90b
SSDEEP
1536:2LOJMXV6/NfNQImcxXE6bSc89p4UpTM2e1Z6xDPGjPbg2My:2rkIImc+C8vEwPGTbgw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
828a55e06ce5f4751b3927f838b98982_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ