Outt
Sett
Behavioral task
behavioral1
Sample
83da40eaa83a3c8db4828bb91992e7a5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
83da40eaa83a3c8db4828bb91992e7a5_JaffaCakes118
Size
55KB
MD5
83da40eaa83a3c8db4828bb91992e7a5
SHA1
4924ae098c14594721392b34c54316c97b73862b
SHA256
2904ec83b6fa0fc5ad70c20cd8b0995e27703696cba07aedc504e90ea9ec9652
SHA512
872bdf3e914039cddd16afd4602bfd293fa15fe9244db059ad34dc5a023fda6d776a68ab59b199ef7be266bd4aa28abf24b11dbeed892aae11a5766c363dd63c
SSDEEP
1536:V8O9Nn6Rjrif5duI2duQFXgUzDPOYP8PI8lZF5MExBw/D+O3:2Oz6VWhduVkSXGi8g8fJBw/D73
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83da40eaa83a3c8db4828bb91992e7a5_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ