Outt
Sett
Behavioral task
behavioral1
Sample
8396e4128daabb521728e674342b9c0d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8396e4128daabb521728e674342b9c0d_JaffaCakes118
Size
67KB
MD5
8396e4128daabb521728e674342b9c0d
SHA1
248c4d359db3e0422ee11235fe1e8be7af58a941
SHA256
08c556b10192a06176bbe816a0ff85b95e655a1c3b76be5162e9a17787e4c89c
SHA512
9f98884ce0526ee87374cd0cc66e6a12bb67f7176243cf721997764e709bc71b26ddb2d499a82cb0d62cad8e29800de9f9902d634169d2ee8f53cfd585e2f38d
SSDEEP
1536:9ZUF5z51oOSW5CpKFFTglM6opKB+RD4O3wVtS:DUFlSWQpKFF0lMGAD4zS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8396e4128daabb521728e674342b9c0d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ