Outt
Sett
Behavioral task
behavioral1
Sample
860fd660c89fd213c88e80f9c979fc15_JaffaCakes118.dll
Resource
win7-20240704-en
Target
860fd660c89fd213c88e80f9c979fc15_JaffaCakes118
Size
63KB
MD5
860fd660c89fd213c88e80f9c979fc15
SHA1
df5c90e603fd24223a0abd70323a36b79e7d1e4d
SHA256
db41524f57d12874c0fb3dbc03742e86b3bb86439fa469d4d585374747f63eeb
SHA512
1b1e7623f6f87d36bf884e138f529927101cd2d97c5da20af9b23091da7cb4829e8120d7f704cfe7d3e0617f0e341220eb24a877d6115cb0cf22037039f70135
SSDEEP
1536:NGWJojnFyOZ0MBXkkcvsvN8/1U5/1YyPABfp/CAeM7Wt:rJojFbrBXkTSAyPABB6Als
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
860fd660c89fd213c88e80f9c979fc15_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ