Outt
Sett
Behavioral task
behavioral1
Sample
85e631fb57be412680b661fb16b11a1a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85e631fb57be412680b661fb16b11a1a_JaffaCakes118
Size
64KB
MD5
85e631fb57be412680b661fb16b11a1a
SHA1
02a9fd621269173aaa0bbb0578f744f71a39f57b
SHA256
3e15f2225456f44398b7a424f749ac37a961b801f65944492c1676291b9e6224
SHA512
03fd57af1bd2e37c06062eff3f59e891e7432b2ca0876cb757b5f7608991acb1dae365b57fd1445b0ea97e0f6e96f1b7f38fa44dbce85c2d072a1806aa26c769
SSDEEP
1536:MhBRVgrExucM43x7IFov/QXWVdmto8sRRveUwTz:cRRsO3xzqWTm23venP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85e631fb57be412680b661fb16b11a1a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ