Outt
Sett
Behavioral task
behavioral1
Sample
85d15859fdf49383fde335254c101f22_JaffaCakes118.dll
Resource
win7-20240704-en
Target
85d15859fdf49383fde335254c101f22_JaffaCakes118
Size
59KB
MD5
85d15859fdf49383fde335254c101f22
SHA1
453545acc03d25c461a5f42c41b1d2e9ccc475a3
SHA256
554d27a889aeb46fa58bb8d29e66fd6b61f3ccef2f2ed9d833d8492746d73b6b
SHA512
c25ed18c71f178e4f6e001a63eddac370de518dde25c440ab38e1b40ceff791b55fea8e718dc4768cc54a78dcdc5136dc7401d524b7bfb95f081e4e2487b2555
SSDEEP
1536:yl3E0TDDYDSQ+2mzv7Dl0P1L+M9h3h80pRmaNj1:E39LN2S8ZumIaN5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85d15859fdf49383fde335254c101f22_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ