Outt
Sett
Behavioral task
behavioral1
Sample
864a9d3a1c075c663f2dfc2f36082f43_JaffaCakes118.dll
Resource
win7-20240729-en
Target
864a9d3a1c075c663f2dfc2f36082f43_JaffaCakes118
Size
63KB
MD5
864a9d3a1c075c663f2dfc2f36082f43
SHA1
40c812124032bffbd9620d94b0fb9075ce567629
SHA256
2e972a231b5c3d3f09f98615badc486f05ee117f7aa98c4944c7444046a287c2
SHA512
343e7fb5a8d9a19fa33b89e8182adf69f215bb7fe2f8e09cbeabbb012b8e209e4507e1e8030df87b0939a5b5b35df4330637258e163c997c179732a6265fe686
SSDEEP
1536:1zExMwCGQ2jzku70pvb+iXLjNkglW+lxCqjFg0vu2WWgkloQiAZ:1I+wCGvcmmvb+yfGgk+lxCq3vu2PoQfZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
864a9d3a1c075c663f2dfc2f36082f43_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ