Outt
Sett
Behavioral task
behavioral1
Sample
841c31778f2bc87bba82c3219fb5c5a0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
841c31778f2bc87bba82c3219fb5c5a0_JaffaCakes118
Size
64KB
MD5
841c31778f2bc87bba82c3219fb5c5a0
SHA1
80f830b4fcfcd637a48259d3b432012693a98d9b
SHA256
4fd92ae917f921ae4a9cc62aafc8d3db80e22496fdd64d60450899356594a880
SHA512
5e24b697a00676382534424468b9f2ed4653504d0d03ada4004f7e7cb3a1230a5b86f17c822d3a263699759c03d6800d09bb5fbd6baf20319ec3de617410fc5d
SSDEEP
1536:5jRmO2TEApHFP6hCq0kb4qixf/3CLpbSL4H:xfpiarb4qQCLpbN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
841c31778f2bc87bba82c3219fb5c5a0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ