Outt
Sett
Behavioral task
behavioral1
Sample
82ffb584c4908456c1842531829957a8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
82ffb584c4908456c1842531829957a8_JaffaCakes118
Size
64KB
MD5
82ffb584c4908456c1842531829957a8
SHA1
cf08b7f35658f0308dcf59e1c7c676d29b4ad037
SHA256
a998465097fd60b0d53eb73a260c56c880faf57e39eecfac7f27a56e771523de
SHA512
db5cf3cf2547fd7429913e63fe34443012cbc5b2c5f234f863e20cf37d24ca961e8dc4a786b27654655647dfa4c7d306da35f6d87a739cdf47d9c685089a93cb
SSDEEP
1536:5jRmOGUdqZ3QltvTUYfcBvgIHMIMmNkc7Um:xfGUdqZ3QTU9BgIsc+c7Um
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82ffb584c4908456c1842531829957a8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ