Outt
Sett
Behavioral task
behavioral1
Sample
843125f4389273815697fc1dfcc4197b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
843125f4389273815697fc1dfcc4197b_JaffaCakes118
Size
54KB
MD5
843125f4389273815697fc1dfcc4197b
SHA1
c6caddd3af28c63fb17dc65e29fedeb1188f1dbf
SHA256
2856b7be2a8902d6d7c46699362ceb74d40140417ed5430a6f746d1c43e7d556
SHA512
a1b5f900ce7fce427909277294cdead8f27d1f4d851309d5189f7c04bf1ba150ff362da603e372d242cc9112dfc1a6cadc71bb20a27d8368b13692e89a8493ae
SSDEEP
1536:V8O9Nn6Rjri+LAbpeboNwed71nLg9PgsBgJP8gzp83:2Oz6VW10boLdJ+Prahp83
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
843125f4389273815697fc1dfcc4197b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ