Outt
Sett
Behavioral task
behavioral1
Sample
88241dcb708b7b924a4c3ba05f89ea45_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88241dcb708b7b924a4c3ba05f89ea45_JaffaCakes118
Size
61KB
MD5
88241dcb708b7b924a4c3ba05f89ea45
SHA1
1d9dbff0ca08ea1f50c7b912410b61d300e1e657
SHA256
2595d52bd3253fb8098320449176254ceadde93594acb21b888f911a9a9a186d
SHA512
c3564cab57d3d1fe1868f9ce4a9616afafd407a2f715e26c0cc13b781f9018be23df5de5ae0c92d7f79072547442d3777fe09bbb0ca3e0e1862063b3da571e22
SSDEEP
1536:mPO6KEVbsVP0gmS+LCdNwAkWZV7Fir5zlSDhqgVBNhyCE3Rb:cMEVbsVcjSAU6ArZ9FKQDhqooCE3Rb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88241dcb708b7b924a4c3ba05f89ea45_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ