Outt
Sett
Behavioral task
behavioral1
Sample
85a1d7b8bb78c5f2898eadcbab609336_JaffaCakes118.dll
Resource
win7-20240704-en
Target
85a1d7b8bb78c5f2898eadcbab609336_JaffaCakes118
Size
56KB
MD5
85a1d7b8bb78c5f2898eadcbab609336
SHA1
40dc52af7d9d030d66882f6d014b05733846af03
SHA256
5ee6e92d69881bb3b90e1d93687aa95481cbab56583138b17fa8047b2cf1fbaf
SHA512
2dc91eda304f2eed31892d1411aa3798bbaadebe574bd1224f4b1fd7aa3bc268c575bea47832a43310eb0b7f948ee9d043d91b75abc653a6226f12f8aefe2a08
SSDEEP
1536:anR2pTCwp23XwI62OsPbF/o9QLcix9G6vM:aR20CQXwszF/oWLcix9lvM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85a1d7b8bb78c5f2898eadcbab609336_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ