Outt
Sett
Behavioral task
behavioral1
Sample
8570a3799d3777c42308864914061203_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8570a3799d3777c42308864914061203_JaffaCakes118
Size
54KB
MD5
8570a3799d3777c42308864914061203
SHA1
8666a41499f245f53a73bc56d6c5c3bde7073324
SHA256
32b08aeb571a9f5353411de983c40cbdda80b9e07da680e7cd0f831f1bb7b4fd
SHA512
bf61d294ccb6936e6b9b465877d8783b2724990ca4c2655fef000ebc968474312c102ce42a70d1060bdfd3dbae91e5bd83337298dbdd38b247e91d1b6f1eb223
SSDEEP
1536:RV8EurdTRVmLv39kG0JuJw1daHSffQM7jHhP3VN:T8DTR4LvNkUmTaHjM7jHhj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8570a3799d3777c42308864914061203_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ