Outt
Sett
Behavioral task
behavioral1
Sample
8299e908e6c209462d4881957bbc8929_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8299e908e6c209462d4881957bbc8929_JaffaCakes118
Size
63KB
MD5
8299e908e6c209462d4881957bbc8929
SHA1
ef1777decb0863f5d860f2a8d620242343039a6d
SHA256
1480dbf1bc019cf4e7dfc5d90dc89344968b6b097ba5773b7b52d5cf8e9420a5
SHA512
079686592241463766f04a5729f0ca0b604742695f91c429068d62a48eff1e6812a92ef295a58f0504576b6ef3cac84b0917c444d0b2dcba9d0a564afe32acfd
SSDEEP
768:h8WTpVT0X8zbF7nuueuk8r5IusbD36w40PLbJY8EyuGIaFeIIXhG7p9ErFLCM1xM:RVdPeuHEbD4T8RFeLhS8FLP5ULl3Fh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8299e908e6c209462d4881957bbc8929_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ