Outt
Sett
Behavioral task
behavioral1
Sample
8438ad8e0c5827b06cdefd4748159de1_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8438ad8e0c5827b06cdefd4748159de1_JaffaCakes118
Size
73KB
MD5
8438ad8e0c5827b06cdefd4748159de1
SHA1
97b0a0de477b37862fb2326993da8b16f1358dc5
SHA256
142e1b0f59ad98e244c9ffa325fdf2e3f7c95905dc9d55a6012a6ee8baa8879b
SHA512
8718c4c82b5c7d14afbd411ec3796ae8eaf0918b46a1ed0c9e5b39c7011b65a8a010f8772218dce1682efd064d54be81e88687f6a55d11009ce285abf714146d
SSDEEP
1536:mPO6KEVbsVP0gS59hLrRfr30m2Yt8eO9+WI7y9jIMdUwuOiq:cMEVbsVcpRdfP2m8LBdfB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8438ad8e0c5827b06cdefd4748159de1_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ