Outt
Sett
Behavioral task
behavioral1
Sample
85131dadb199a4d9fb5622558715083d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85131dadb199a4d9fb5622558715083d_JaffaCakes118
Size
66KB
MD5
85131dadb199a4d9fb5622558715083d
SHA1
d64c540e3a742ffae57414b5d4d697aeecf01546
SHA256
55edad58c11a5bfc3142947c1c579663122347947306b3ea6264bab3aa0d2be5
SHA512
f1ea49977462f796620e469e208bad4180ebde317ba66f5d933eb86b6273c03e89e87dd64c36f676f612a08c0ea3b649722703d3204407b6fc7d1d3ce5251b6d
SSDEEP
1536:EGE4shmw/wMQ0QkegK1KxX8eUPIu+jye4lCgvWr:EG5shjQ0v/4iXZUmye4lCg6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85131dadb199a4d9fb5622558715083d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ