Outt
Sett
Behavioral task
behavioral1
Sample
831594c6f88e1fe914e0069a56c7e217_JaffaCakes118.dll
Resource
win7-20240708-en
Target
831594c6f88e1fe914e0069a56c7e217_JaffaCakes118
Size
61KB
MD5
831594c6f88e1fe914e0069a56c7e217
SHA1
771934f2dc420c83e1d7810279dca5c440aee288
SHA256
38051349e9739d9ef465ffc6923d3fd6b5e5db6823f89711bfb6469d7f707cb8
SHA512
27568631ccc1b008826f82360c772d88c833f5ffe298070f77f75cd53309f467b8860f7dc3ce21d36c978cc9d59a17e147387fa25e8d66b285eddcaf8febcdcf
SSDEEP
1536:evh6SQCfEX9ioy25YLJZtXk4szO9Try14U0Ej:Q6pDy2ynazqhC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
831594c6f88e1fe914e0069a56c7e217_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ