Outt
Sett
Behavioral task
behavioral1
Sample
82ec68d28dd4d00631b06178d28e4bcc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
82ec68d28dd4d00631b06178d28e4bcc_JaffaCakes118
Size
70KB
MD5
82ec68d28dd4d00631b06178d28e4bcc
SHA1
ec51750146f842a51ca893c6904eb2754f670312
SHA256
d81f7c8023cea6bf7717fbbad3da50281e98b66ed28be8675bba4036ab5322a0
SHA512
fbcb6dc122d89df7bbbaf10271948e4fd36fc8d5b54e638562ffe7d5f8942049508207d53713877fbced5915d741a96894e170ac77dade6112155c9908ff99f9
SSDEEP
1536:mPO6KEVbsVP0getRFXwFGgcYN8K2FOCBCpLaJ1YlluACXE7kly600q:cMEVbsVcpXwMgFN8rOCALagllufsky6K
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82ec68d28dd4d00631b06178d28e4bcc_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ