Outt
Sett
Behavioral task
behavioral1
Sample
882c3562807d419ba98d1bbd1d5e99a0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
882c3562807d419ba98d1bbd1d5e99a0_JaffaCakes118
Size
65KB
MD5
882c3562807d419ba98d1bbd1d5e99a0
SHA1
0336da3d53e2cc4ba022aa105650d36bad48f140
SHA256
1698ff5b4add4ab170a038d0c1ee49720c4e06b8bf4edb5051ca448c0b30e73a
SHA512
d3106df57dda60f3a647a27086363323f5d63fbbb15315896cdaf05e8017e56e814f0a82855b507b04dd511353c913f936b97378046e9fa9481121e44cb069a6
SSDEEP
1536:yHZY03h7x81wriGOfu8EN71182WvPj0ARbBT/fPK4fVR:yHVh9819GOMN7113WHoARbBfimD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
882c3562807d419ba98d1bbd1d5e99a0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ