Outt
Sett
Behavioral task
behavioral1
Sample
85fdf15e61868686ce4157803953c76b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85fdf15e61868686ce4157803953c76b_JaffaCakes118
Size
79KB
MD5
85fdf15e61868686ce4157803953c76b
SHA1
7b30977380a98d7ef2eaca56e94f492b83a93458
SHA256
3b5177c3047c6b5186f8919e1f7aa1512a106ced90b30f3d68fe32eb853e5f39
SHA512
786e56a74cfb2c6ef2506425e2bd2eba2b02ccbc1008aae2859c467a138328f210e45d1f78368408193142daa918fa16b6860d988050c904a76988bc28ac5f4d
SSDEEP
1536:yl3E0T+xmK6+0uPuPMb/O9sW768zmFXH1uwwdkhsVxdKLldc0kLpvE56xAZiy:E39yxmK6+0L0Dess6TFXH3Akh0bKLldJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85fdf15e61868686ce4157803953c76b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ