Outt
Sett
Behavioral task
behavioral1
Sample
8571370c3de33dad9ea0b1acd880f4d8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8571370c3de33dad9ea0b1acd880f4d8_JaffaCakes118
Size
72KB
MD5
8571370c3de33dad9ea0b1acd880f4d8
SHA1
94bb486663e63940fe754440a5bd3b96ea435ce8
SHA256
5ab1382b179986700733abcc4bba58a862a4a5efbf541a9ac35653ecea080d27
SHA512
028250f09f9cc59c6991613d45e62fd198ee1b541126020786b5bc5b783c5f57642c7e5a1d3a1d7fe3cacc640479d73e11d933eb895dca3d155602686338c253
SSDEEP
1536:Bm1NGJVGQ8xIHJL1d5epA0GCdQ4cTgszy/fGUaANwvLX:kX0VJ0cFe+OdQ4E6GUaNTX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8571370c3de33dad9ea0b1acd880f4d8_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ