Outt
Sett
Behavioral task
behavioral1
Sample
856106d5ca854ca1661899b90f1709e8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
856106d5ca854ca1661899b90f1709e8_JaffaCakes118
Size
77KB
MD5
856106d5ca854ca1661899b90f1709e8
SHA1
aa35c2ba0b82b6b422190f9fbc7c3c1bbc01066f
SHA256
92516626821f630bc76253a26df93376b4effd4e7689e4a47677b525951cd0c4
SHA512
cf0459d4b3cd5698dea9ce3292d04ff5d0702383585adf67f851487c51053da4738370bc9d0697552723800d8336090738f2f9a82256f6ee38c53cc53a1b2a15
SSDEEP
1536:2LOJMXV6rhT8SYxz95BL5/AGLXimTgKwJtZrlYk3OAH:2rkrhwScBLxAGLvTOrlYEnH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
856106d5ca854ca1661899b90f1709e8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ