Outt
Sett
Behavioral task
behavioral1
Sample
8303a44c1dc581e6a40207a1f4194e57_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8303a44c1dc581e6a40207a1f4194e57_JaffaCakes118
Size
82KB
MD5
8303a44c1dc581e6a40207a1f4194e57
SHA1
f59605101de3361ade51e7351e0b62e875e570f1
SHA256
17521a1e56e2e00d85335b06c1fa6087f6c2aa591b85a514994aa075437aa713
SHA512
f8b778a5d556875b3b4799d4b4b03530b8783d5d69848a9414a2cc7c78fe56d63365848c93d45e3741b4b79ce1c18b259e668c8f7045794926bc5d8af953f125
SSDEEP
1536:agF0eiyUcbuwsUq1ZZ6AgeS/W61YHoV+3M84lCPiciPlYs5iChEpd:t2yF6mqZOO6E4+3M1lC6Zp5iCKr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8303a44c1dc581e6a40207a1f4194e57_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ