Outt
Sett
Behavioral task
behavioral1
Sample
8433e9753d942618b11c0ab705919182_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8433e9753d942618b11c0ab705919182_JaffaCakes118
Size
65KB
MD5
8433e9753d942618b11c0ab705919182
SHA1
33d6072abb0b1e44eff683a365d18ce3be122037
SHA256
c1da2df7c07c64bc048ea23623d68b7bb8b6a73f37d151c07bd4ff159087fd13
SHA512
c1ac5c701bf1d9da7730b5029b94695213d62eb843b6c657a21834885c52e5dbfbef86d3cbf9194591625fd6d721bc66f32e48cbb99316eda7938ddb15d7317b
SSDEEP
1536:ev4dFmeToAW8HK47LYDAo1XK5+G4Wq//Oyz2SW:joeMAW87LX5dyXO7SW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8433e9753d942618b11c0ab705919182_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ