Outt
Sett
Behavioral task
behavioral1
Sample
84fc10b7019e7419bbecce10ce839a60_JaffaCakes118.dll
Resource
win7-20240708-en
Target
84fc10b7019e7419bbecce10ce839a60_JaffaCakes118
Size
76KB
MD5
84fc10b7019e7419bbecce10ce839a60
SHA1
82eb4b0d486524c69b6e689c76415cd51b1aca37
SHA256
4b7aaacb8bc43413bc4e4d4d7ce8fad422a525d08092a160230a22cffc29be2d
SHA512
a89f2bd405e6b18310c1efc7e539525698526e155ac481f5563c6cb6896d410c24dfde3e3777b17c549b4ce4b0c7db0dd07093ce879572015e2a3fc2705350fb
SSDEEP
1536:1zExMwCGQ2jvqCYm93o64KvMXaj1r/7jnthuxmgl6Fw:1I+wCGveCRo62i1r/7jthuxp6Fw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84fc10b7019e7419bbecce10ce839a60_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ