Outt
Sett
Behavioral task
behavioral1
Sample
83c206a49e90773cd8d7738cbfcaf7bf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
83c206a49e90773cd8d7738cbfcaf7bf_JaffaCakes118
Size
57KB
MD5
83c206a49e90773cd8d7738cbfcaf7bf
SHA1
da1d3c2d44227f881c7d88bb3c4604b40593e288
SHA256
a1d96e55952432388b5defe385f00d40be87f9cf36c6220ecb45e0bc3c8b629c
SHA512
ae09434cfa5142b3356b323f875a409408f3692742736aa19c369a7d3739a81711705506173e684b5d3f41666dd11411ff351c58f58ef14f1b6262cdaffb4bc6
SSDEEP
1536:jZIcCxRhnyjXrmVS498sG9KWwvMHlTnW+OkSnVWO:x+vnyzrMf9JKKclKZkSVX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83c206a49e90773cd8d7738cbfcaf7bf_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ