Outt
Sett
Behavioral task
behavioral1
Sample
84f8e9e3a32f5c78e9eb0e2a10f0469b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
84f8e9e3a32f5c78e9eb0e2a10f0469b_JaffaCakes118
Size
60KB
MD5
84f8e9e3a32f5c78e9eb0e2a10f0469b
SHA1
ddfb36d19456a744b0ca3f90fbc3fbdb21bcec98
SHA256
4ff5443f69ccac5b00e2ba16b17cf5faece4d4495c8ea252cf71d8e3de150b28
SHA512
b739ae3a3802205e934a892ecef4363c04e4b489412bc2ed51904ccba5cfac38dd678ce4c745a7896f10fcbaa1ac1c716af3faa98129b4f6206d46c09cb958ae
SSDEEP
1536:anRS6crBJeKc3dDHx5djgLCHB3a70Irh+p:aRQJo3dDxjgLCHNa70u+p
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84f8e9e3a32f5c78e9eb0e2a10f0469b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ