Outt
Sett
Behavioral task
behavioral1
Sample
82ccc0c3ceb8020778b03301641f3aa5_JaffaCakes118.dll
Resource
win7-20240729-en
Target
82ccc0c3ceb8020778b03301641f3aa5_JaffaCakes118
Size
68KB
MD5
82ccc0c3ceb8020778b03301641f3aa5
SHA1
97ed8ebfc2265b6e0dbebd3e12ec96307c1b4776
SHA256
7f1f1fc84ccda0e968eb9212d6584352303f302fa88f75c75072a156b4744451
SHA512
ecc77874541ec840a382bfdb7a02d67880d33b0f7f68825e08937c073d68ad9df92befa1f11b8a2d14a9283d6ee07e57e68f56ad89fe8157626e6d721850bbd9
SSDEEP
1536:cF29Cp06PmhTDIdBoc6mbxQzDGJdHEn/RrsRp/9u6ZtsQdERQG2T:76PmhTANbFnkn/1sfM6M1RQG2T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82ccc0c3ceb8020778b03301641f3aa5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ