Outt
Sett
Behavioral task
behavioral1
Sample
844013f0a9f10c873e3c1ae3084f1c10_JaffaCakes118.dll
Resource
win7-20240704-en
Target
844013f0a9f10c873e3c1ae3084f1c10_JaffaCakes118
Size
67KB
MD5
844013f0a9f10c873e3c1ae3084f1c10
SHA1
1186e360ae5024a864f5482fa0414c9c85755df4
SHA256
241b444d7ef5b1653021f151b9df016f5019abe0c74f4c3defbe61ef430390c1
SHA512
dae1e27e4d7ab0e4cd7705ff01b0df8684736b612d0c9c2862fdc410ac0243e3c9de8b81da847947d82b290101ea687eb47613b666f0096457b99c8feb39deca
SSDEEP
1536:mPO6KEVbsVP0gm3aHK8nw43uksAtnaXnUrXME/GqF1+Y8c:cMEVbsVcrQnw43uFAAXn8cE/GZY8c
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
844013f0a9f10c873e3c1ae3084f1c10_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ