Outt
Sett
Behavioral task
behavioral1
Sample
8480fcbbfaa39679fe63f9addfc0b418_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8480fcbbfaa39679fe63f9addfc0b418_JaffaCakes118
Size
56KB
MD5
8480fcbbfaa39679fe63f9addfc0b418
SHA1
c4241af7081974e914e71a1f24d2121efc45ae63
SHA256
24d728fb60f077a7babac945b520d23c5b7a34612397035bd0990a3161856319
SHA512
599f6563b74cf6a1c43883acdaa51e57365fa16ca806ab673184e8e7c58053d543f5f8bc043a3068c3d47e400dcc6a657255a3b87cb8304c4174cb6b52ad94ec
SSDEEP
768:nbY4l7gG5247gSEuh1JoqsCWUV/2PkLaVwkgCOHpLZBHbzAvbxbI:EG7goN7g9nW9wD+kgrHp7HnKE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8480fcbbfaa39679fe63f9addfc0b418_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ