Outt
Sett
Behavioral task
behavioral1
Sample
854da9d8efa6d67b6c1f47331b902c10_JaffaCakes118.dll
Resource
win7-20240708-en
Target
854da9d8efa6d67b6c1f47331b902c10_JaffaCakes118
Size
72KB
MD5
854da9d8efa6d67b6c1f47331b902c10
SHA1
4f6caa14c633551ce95b21c95d5419dd00211111
SHA256
c24f58e4232499bd5cb205888d6fab031ad79b8e949de65a6bb91a8bc138c142
SHA512
92fd5b19c86370a1c796019ef40c7c18c2a58601b0bee93fa9304025d2689f99daaa75e238818fc05ab4f3f0da268f14052674c1b43ae3b9a3b8c1c28da46591
SSDEEP
1536:ev9AMHeoQsFYWHnl3pyT8h6hws2NjoRjhYrR8Gh:eAMxFYWHnfyqvs2khFc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
854da9d8efa6d67b6c1f47331b902c10_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ