Outt
Sett
Behavioral task
behavioral1
Sample
85e2956d63fea84f49de55c941a9fa9c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85e2956d63fea84f49de55c941a9fa9c_JaffaCakes118
Size
68KB
MD5
85e2956d63fea84f49de55c941a9fa9c
SHA1
908fe39ecb9264ca50722568cf906f3f9e005f8f
SHA256
0734d54ce1f648a8bd2c95983a754e76d83d330b315bee43bfd48aa37220b35d
SHA512
40db167ebb5f471550ee54db0b4a168005d452588d3872bec66d537246bf8cafb7cfae4be12c5702341acbf218873a741929c37cd171b1548bea5da009369a65
SSDEEP
1536:yHZWOWWgVD/tli7vbdKzy3XwPxS/ZW6wIsBQenWLJK:yHjWWgVD/tcrI8ksZWQYQenWc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85e2956d63fea84f49de55c941a9fa9c_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ