Outt
Sett
Behavioral task
behavioral1
Sample
84f27b394afdab9090ba77192a14dbd2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
84f27b394afdab9090ba77192a14dbd2_JaffaCakes118
Size
55KB
MD5
84f27b394afdab9090ba77192a14dbd2
SHA1
c8ff7659945d5453de7a4cb9efb331b4294d1df2
SHA256
64d8e404cbc2874b604aef3b0ad8f9b988a019ec2aa1002640ccc93aa02cbba9
SHA512
ac3be63dc0cc3ffbb96f36be80dd278ad2530ffef3a59971f899a44e1bfe0f0440d8c2040c8e59d61988116d8384ac0e9483037ea30c93432c7e520147dc12e9
SSDEEP
1536:soa1lMWimpeyrp+ICP7GqM0rWib239w3N:SMWimnrIxP71MEitw9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84f27b394afdab9090ba77192a14dbd2_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ