Outt
Sett
Behavioral task
behavioral1
Sample
83c18cd4094417b433a6872c68f38d8c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
83c18cd4094417b433a6872c68f38d8c_JaffaCakes118
Size
70KB
MD5
83c18cd4094417b433a6872c68f38d8c
SHA1
71dd298a55f0270e15894b3d67cb9cb2bd6d3bdc
SHA256
472b13931b67970618e248784c53693f3906bfece3b2fccfd992b6c0e93c8ff1
SHA512
96a0a8e13d5af66de7c6a50cad6ba4a30aa1b34386c0815ea93fb71170d991d35e6b82ecd41be97cd192e087f00323fc35fe6f9de95b07a803ee567c606bfc63
SSDEEP
1536:agF0eiyUcb75yiSp2wOtgvSXeu2BWm0ldlJtzNUYokq/W0HuVe1qCM:t2yFprwItESCBBaTRo7/W0HFm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83c18cd4094417b433a6872c68f38d8c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ