Outt
Sett
Behavioral task
behavioral1
Sample
85a7688edd94312b74099b62c8bc4563_JaffaCakes118.dll
Resource
win7-20240705-en
Target
85a7688edd94312b74099b62c8bc4563_JaffaCakes118
Size
59KB
MD5
85a7688edd94312b74099b62c8bc4563
SHA1
b878836490e2e98d2e1933bd4357159b51077526
SHA256
a9b0d394c226193f2d9bdc38af2aed3ec1b94c12f86f99fd7605999fa08e636f
SHA512
9bd1c518b5c494ef5d5c61b89c2748299aef525d83fb01e74ce6591f2b13edb0e9679b2a40903ea51a3bdb9eecc3e174dfe4484337a08c57e4db07293d5cb40c
SSDEEP
1536:yl3E0TiJkswdro6kH/KaFxfXVfkHFJkKc:E39Otwd06m/KWX1247
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85a7688edd94312b74099b62c8bc4563_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ