Outt
Sett
Behavioral task
behavioral1
Sample
87df011a52f50f3faeb7c17acdbd584f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
87df011a52f50f3faeb7c17acdbd584f_JaffaCakes118
Size
65KB
MD5
87df011a52f50f3faeb7c17acdbd584f
SHA1
844e732a7f3e7ab9e81c00a784f93385f7b6d94a
SHA256
686c3f6d4627c510fbda7b860c63254d467190fb1edb621351d147602c709fb5
SHA512
6a4c5853a72a58d71476bca8de9f68c9f47d022be0a64f4787c91e545d2fa8ef7e5ad8c7dd3c68b2d2b9f1c0d2c3f277d6076073adfbef5b6f4b3bb5ba2a1921
SSDEEP
1536:MhBRVgrExucMTt1pz0CkOZarN8sIPsxIEyfcVj/McbeTxmT80d1:cRRsZNFRZVsxIEUcZk5TkTT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
87df011a52f50f3faeb7c17acdbd584f_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ