Outt
Sett
Behavioral task
behavioral1
Sample
8297e59642a4f7df0ec1a8dc4ba6dac8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8297e59642a4f7df0ec1a8dc4ba6dac8_JaffaCakes118
Size
65KB
MD5
8297e59642a4f7df0ec1a8dc4ba6dac8
SHA1
c1aa62568c212f92f406d780e9a93bca88466163
SHA256
8bed0f244112cfef0f539630b34f81cc984e889011c0bac5edbaef42fbb9ec1b
SHA512
1793f9a6d4176e2e603140d989e9612abf8c4b9490408ca934968b89f009eaef457895293d1c2d0c8bfa269534ffcedb9837c55adfde82f6ca70619f483732b6
SSDEEP
1536:jZIcCxRShRzwqo9R+2hg8KohLZ4gOFIMs7yb/:x+EhR3KRxh4ofFJM1/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8297e59642a4f7df0ec1a8dc4ba6dac8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ