Outt
Sett
Behavioral task
behavioral1
Sample
864c03aa836304ee59749e1457bcda68_JaffaCakes118.dll
Resource
win7-20240729-en
Target
864c03aa836304ee59749e1457bcda68_JaffaCakes118
Size
71KB
MD5
864c03aa836304ee59749e1457bcda68
SHA1
2c27dff90e39ee3596b4cc9ba1f040a29301a2b4
SHA256
21adf1abfc928c42cdaea13619a08c048fb93ab46b521290e4039351b7743472
SHA512
c628b90907769bdb0eaa465e9221911e86065c88a6787c212b3ef6e46f77a3a8c02e7a8e1b397384d8ca47dc93acbf7d6db49ed33b243ea1f132855492727c7d
SSDEEP
1536:agF0eiyUcbAWxmvZZTop5WbARLneoUnlMY2Vwac8pk4yMCwLsJRLIsenz1:t2yF4vZFop5WbARLn/UneY2ua7yMC/Rg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
864c03aa836304ee59749e1457bcda68_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ