Outt
Sett
Behavioral task
behavioral1
Sample
87df406e12aa28bcf29e3d5b490a660c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
87df406e12aa28bcf29e3d5b490a660c_JaffaCakes118
Size
79KB
MD5
87df406e12aa28bcf29e3d5b490a660c
SHA1
96460ff3ed9ec23db3a6cdd3af5bbcbcd1a3030a
SHA256
0ce142d140ebffdf5d77f3c10caa58916c0b4c22acb2c9780af59a59e8d268b6
SHA512
00efd1dcf35314b91d3ca8970956102454c2d9c1b77e0d9eb922e49998734c6634d70dd20bfdb8fa8a9f535e4bfe2701abf4a9cf441d8639193845170e94af86
SSDEEP
1536:tYvzQ4b26p89A3ACvb+4bJpFyrgOtJz/DNB9GiwDABOa:Svjb26p89gA6bwr1D/DNB9TCAEa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
87df406e12aa28bcf29e3d5b490a660c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ