Outt
Sett
Behavioral task
behavioral1
Sample
860dd4222411cc644d4d87b8a6f61868_JaffaCakes118.dll
Resource
win7-20240729-en
Target
860dd4222411cc644d4d87b8a6f61868_JaffaCakes118
Size
61KB
MD5
860dd4222411cc644d4d87b8a6f61868
SHA1
5a106ffa3caf145f4bcd12427d6778fdd1e8c248
SHA256
1dc2ec251f3bd91b5effe9e4cc0d865adca56559a4c63a50c897e9f93a3d0980
SHA512
e978779354d1f7a8c2683d984529a46b3c4dc27c789a7816da8ad5b7cb9088e4250e8b09ab972e32144de38799f26e9632b9dc19a97793c1d39916fd1e30501b
SSDEEP
1536:anRqZ3wGAU1lFeRdfZQmOInwIlIwhvoFYzRwx:aREw3UheRdfwUwt6gFy0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
860dd4222411cc644d4d87b8a6f61868_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ