Outt
Sett
Behavioral task
behavioral1
Sample
84f386a4d7faaa348dfe1b466e1fd1cb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
84f386a4d7faaa348dfe1b466e1fd1cb_JaffaCakes118
Size
73KB
MD5
84f386a4d7faaa348dfe1b466e1fd1cb
SHA1
20ca2bb318787c528b6777e68824d268928251cb
SHA256
16b31f1288c0dc7e74b28e6968f081502f10988532efb1ed105fa2937754e9e4
SHA512
a68420d3c83e0651c85ec6e203d728f4a6fd1843073425eed6eb9fedf0949e4e36fdd5ca6eea885419693f8b5637cff94ea570be0bfff26c94e2340f580d5808
SSDEEP
1536:EG2oQASV5AePORaX3wMIe8axDlsEnOsI2bEM5LnCAFXH0H:EGVQ1fl0anMedxDljnpIe5GPH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84f386a4d7faaa348dfe1b466e1fd1cb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ