Outt
Sett
Behavioral task
behavioral1
Sample
83deff125cb96581ef79f07656b924ea_JaffaCakes118.dll
Resource
win7-20240705-en
Target
83deff125cb96581ef79f07656b924ea_JaffaCakes118
Size
71KB
MD5
83deff125cb96581ef79f07656b924ea
SHA1
94357ad17ae6316864c648fea6c4945c62cee833
SHA256
f86a37c03ab2b491ffc393da6be09f3dbc0c18306fb0797f9bf07f2380e810e5
SHA512
414ee9af5276528f0867ef12d2ab4a93a9f7284b9a2bbba769f94b4f37642fa89a8a27c5fa4c1b9afe8ab74cf6738606a883d5451cf9be725d0d8249786e56f4
SSDEEP
1536:n7ZLNPp9pZBM8UI9f4UD5z4JOdeNgdaRMj+kHVH7okLQTyEQG1:7ZppD9f465Q8eNgdaRM+sXLLEQG1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83deff125cb96581ef79f07656b924ea_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ