Outt
Sett
Behavioral task
behavioral1
Sample
83c31a84d19f55992bbff9fe4fc93f19_JaffaCakes118.dll
Resource
win7-20240708-en
Target
83c31a84d19f55992bbff9fe4fc93f19_JaffaCakes118
Size
73KB
MD5
83c31a84d19f55992bbff9fe4fc93f19
SHA1
1f10734f014fc3e9dcc14a2744690107b6474d64
SHA256
9e4c7328203bf16c4e3c076562ede45137fbae75497a1713f1ca95af3b7326d3
SHA512
b93e74d4eb91d5cd5f89966890f1da6a82f328128678cb72f35e89b5757e143399fe811c10ee61ffbbb4abb5b5c793e191ffcd0b5f52a2e279ac713f9ea3f489
SSDEEP
1536:EGZID77E/DE2W0mO4Cgr8TxDQ4YUWQ7cm2OYEDajcLT7Z:EGqrE/DE2WDnCgr8y6ihEx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83c31a84d19f55992bbff9fe4fc93f19_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ